OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-23 20:05:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #254 from RustSec/RUSTSEC-2020-0007

Browse Source 
Assign RUSTSEC-2020-0007 to bitvec
This commit is contained in:
Tony Arcieri
2020-03-30 12:48:39 -07:00
committed by GitHub
parent f37a7bf90a 4de36fe70a
commit 81193d1dba
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
crates/bitvec/RUSTSEC-0000-0000.toml → crates/bitvec/RUSTSEC-2020-0007.toml
View File

@@ -1,5 +1,5 @@
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2020-0007"
package = "bitvec"
date = "2020-03-27"
title = "use-after or double free of allocated memory"
@@ -10,7 +10,10 @@ Conversion of `BitVec` to `BitBox` did not account for allocation movement.
The flaw was corrected by using the address after resizing, rather than the original base address.
"""
functions = { "bitvec::vec::BitVec::into_boxed_bitslice" = ["< 0.17.4, >= 0.11.0"] }
[affected.functions]
"bitvec::vec::BitVec::into_boxed_bitslice" = ["< 0.17.4, >= 0.11.0"]
[versions]
patched = [">= 0.17.4"]
unaffected = ["< 0.11.0"]