OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 08:13:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Report 0108-containers to RustSec

Browse Source
This commit is contained in:
JOE1994
2021-01-19 20:35:12 -05:00
parent 4250822874
commit b1160c6794
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
crates/containers/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,21 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "containers"
date = "2021-01-12"
url = "https://github.com/strake/containers.rs/issues/2"
categories = ["memory-corruption"]
[versions]
patched = [">= 0.9.11"]
```
# panic safety: double drop may happen within `util::{mutate, mutate2}`
Upon panic in a user-provided function `f`, `fn mutate()` & `fn mutate2` drops twice a same object.
Affected versions of this crate did not guard against double drop while temporarily duplicating an object's ownership with `ptr::read()`.
Dropping a same object can result in memory corruption.
The flaw was corrected in version "0.9.11" by fixing the code to abort upon panic.