OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-03 10:05:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add patched version for RUSTSEC-2020-0100

Browse Source
This commit is contained in:
David Knaack
2021-01-25 13:28:21 +01:00
committed by GitHub
parent 0290f2ba88
commit 99758fa158
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
crates/sys-info/RUSTSEC-2020-0100.md
View File

@@ -8,7 +8,7 @@ categories = ["memory-corruption"]
keywords = ["concurrency", "double free"]
[versions]
patched = []
patched = [">= 0.8.0"]
unaffected = []
[affected]
@@ -23,5 +23,7 @@ Affected versions of `sys-info` use a static, global, list to store temporary di
This results in consistent double-frees and segfaults when calling `sys_info::disk_info` from multiple threads at once.
The issue was fixed by moving the global variable into a local scope.
## Safer Alternatives:
- [`sysinfo`](https://crates.io/crates/sysinfo)