From b4b68c19bce948aa51925b3d742980cee4b10338 Mon Sep 17 00:00:00 2001 From: Youngsuk Kim Date: Sat, 21 Aug 2021 21:08:46 -0400 Subject: [PATCH] bite: Read on uninitialized memory (#593) * bite: Read on uninitialized memory * informational = "unsound" --- crates/bite/RUSTSEC-0000-0000.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 crates/bite/RUSTSEC-0000-0000.md diff --git a/crates/bite/RUSTSEC-0000-0000.md b/crates/bite/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..e92ee8a --- /dev/null +++ b/crates/bite/RUSTSEC-0000-0000.md @@ -0,0 +1,18 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "bite" +date = "2020-12-31" +url = "https://github.com/hinaria/bite/issues/1" +categories = ["memory-exposure"] +informational = "unsound" + +[versions] +patched = [] +``` + +# `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max) + +Affected versions of this crate calls a user provided `Read` implementation on an uninitialized buffer. + +`Read` on uninitialized buffer is defined as undefined behavior in Rust.