diff --git a/crates/bite/RUSTSEC-0000-0000.md b/crates/bite/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..e92ee8a --- /dev/null +++ b/crates/bite/RUSTSEC-0000-0000.md @@ -0,0 +1,18 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "bite" +date = "2020-12-31" +url = "https://github.com/hinaria/bite/issues/1" +categories = ["memory-exposure"] +informational = "unsound" + +[versions] +patched = [] +``` + +# `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max) + +Affected versions of this crate calls a user provided `Read` implementation on an uninitialized buffer. + +`Read` on uninitialized buffer is defined as undefined behavior in Rust.