OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-31 00:30:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add patch version for the unsoundness issue in dync (#427)

Browse Source
This commit is contained in:
Egor Larionov
2020-10-13 04:41:52 -07:00
committed by GitHub
parent 4da6145a2a
commit b6bcce2c6b
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
crates/dync/RUSTSEC-2020-0050.md
View File

@@ -7,10 +7,14 @@ informational = "unsound"
url = "https://github.com/elrnv/dync/issues/4"
[versions]
patched = []
patched = [">= 0.5.0"]
```
# VecCopy allows misaligned access to elements
`VecCopy::data` is created as a Vec of u8 but can be used to store and retrieve
elements of different types leading to misaligned access.
The issue was resolved in v0.5.0 by replacing data being stored by `Vec<u8>` with a custom managed
pointer. Elements are now stored and retrieved using types with proper alignment corresponding to
original types.