mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-01-06 19:49:45 +01:00
Assign RUSTSEC-2020-0017 to internment (#309)
Original PR: https://github.com/RustSec/advisory-db/pull/306
This commit is contained in:
@@ -1,16 +1,10 @@
|
||||
[advisory]
|
||||
id = "RUSTSEC-0000-0000"
|
||||
|
||||
id = "RUSTSEC-2020-0017"
|
||||
package = "internment"
|
||||
|
||||
date = "2020-05-28"
|
||||
|
||||
title = "Use after free in ArcIntern::drop"
|
||||
|
||||
url = "https://github.com/droundy/internment/issues/11"
|
||||
|
||||
categories = ["memory-corruption"]
|
||||
|
||||
description = """
|
||||
`ArcIntern::drop` has a race condition where it can release memory
|
||||
which is about to get another user. The new user will get a reference
|
||||
@@ -19,6 +13,9 @@ to freed memory.
|
||||
Versions prior to 0.3.12 used stronger locking which avoided the problem.
|
||||
"""
|
||||
|
||||
functions = { "internment::ArcIntern::drop" = [">= 0.3.12"] }
|
||||
[affected.functions]
|
||||
"internment::ArcIntern::drop" = [">= 0.3.12"]
|
||||
|
||||
[versions]
|
||||
patched = []
|
||||
unaffected = ["< 0.3.12"]
|
||||
Reference in New Issue
Block a user