OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 16:24:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #814 from JOE1994/0090-endian_trait

Browse Source 
endian_trait: panic in user-provided `Endian` impl triggers double drop of T
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-03-07 16:08:04 +01:00
committed by GitHub
parent 146a642232 3205a0919e
commit 93a881f6fc
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
crates/endian_trait/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "endian_trait"
date = "2021-01-04"
url = "https://gitlab.com/myrrlyn/endian_trait/-/issues/1"
categories = ["memory-corruption"]
[versions]
patched = []
```
# panic in user-provided `Endian` impl triggers double drop of T
Affected versions of the crate does not guard against panic from user-provided impl of `Endian` trait, which is a safe trait that users can implement.
If a user-provided implementation of the `Endian` trait panics, double-drop is triggered due to the duplicated ownership of `T` created by `ptr::read()`.
Double-drop (or double free) can cause memory corruption in the heap.