From 9cf72357c8c52629d22edd8b4b8d7f7cdeea2504 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 22 Jun 2023 09:43:08 -0600 Subject: [PATCH] Assigned RUSTSEC-2023-0046 to cyfs-base (#1723) Co-authored-by: tarcieri --- .duplicate-id-guard | 2 +- .../cyfs-base/{RUSTSEC-0000-0000.md => RUSTSEC-2023-0046.md} | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) rename crates/cyfs-base/{RUSTSEC-0000-0000.md => RUSTSEC-2023-0046.md} (92%) diff --git a/.duplicate-id-guard b/.duplicate-id-guard index 3e8fb01..2fb852b 100644 --- a/.duplicate-id-guard +++ b/.duplicate-id-guard @@ -1,3 +1,3 @@ This file causes merge conflicts if two ID assignment jobs run concurrently. This prevents duplicate ID assignment due to a race between those jobs. -fc9a56a652912ce858d71ad16586ea424807c8ce3b81d0464d910b988412a30b - +aee1905cc6111a8085b4836e39124a2cc0f34e8106f07f116df13ee0057dc8e3 - diff --git a/crates/cyfs-base/RUSTSEC-0000-0000.md b/crates/cyfs-base/RUSTSEC-2023-0046.md similarity index 92% rename from crates/cyfs-base/RUSTSEC-0000-0000.md rename to crates/cyfs-base/RUSTSEC-2023-0046.md index c455d72..d3d294b 100644 --- a/crates/cyfs-base/RUSTSEC-0000-0000.md +++ b/crates/cyfs-base/RUSTSEC-2023-0046.md @@ -1,6 +1,6 @@ ```toml [advisory] -id = "RUSTSEC-0000-0000" +id = "RUSTSEC-2023-0046" package = "cyfs-base" date = "2023-06-15" informational = "unsound" @@ -12,4 +12,4 @@ patched = [] ``` # Misaligned pointer dereference in `ChunkId::new` -The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function. \ No newline at end of file +The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.