From b051e26c3163709e2f1624a4ea767913f134d864 Mon Sep 17 00:00:00 2001 From: JOE1994 Date: Tue, 19 Jan 2021 22:05:18 -0500 Subject: [PATCH] Report 0078-abi_stable to RustSec --- crates/abi_stable/RUSTSEC-0000-0000.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 crates/abi_stable/RUSTSEC-0000-0000.md diff --git a/crates/abi_stable/RUSTSEC-0000-0000.md b/crates/abi_stable/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..9e83457 --- /dev/null +++ b/crates/abi_stable/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "abi_stable" +date = "2020-12-21" +url = "https://github.com/rodrimati1992/abi_stable_crates/issues/44" +categories = ["memory-corruption"] + +[versions] +patched = [">= 0.9.1"] +``` + +# Update unsound DrainFilter and RString::retain + +Affected versions of this crate contained code from the Rust standard library that contained soundness bugs rust-lang/rust#60977 (double drop) & rust-lang/rust#78498 (create invalid utf-8 string). + +The flaw was corrected in v0.9.1 by making a similar fix to the one made in the Rust standard library. \ No newline at end of file