OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-04 02:25:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #815 from JOE1994/0109-arenavec

Browse Source 
arenavec: potential double drop or uninitialized memory drop upon panic
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-03-07 16:09:38 +01:00
committed by GitHub
parent caf713f271 c2248b0eef
commit bcdb169985
1 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
crates/arenavec/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,20 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "arenavec"
date = "2021-01-12"
url = "https://github.com/ibabushkin/arenavec/issues/1"
categories = ["memory-corruption"]
[versions]
patched = []
```
# panic safety: double drop or uninitialized drop of T upon panic
Affected versions of this crate did not guard against potential panics that may happen from user-provided functions `T::default()` and `T::drop()`.
Panic within `T::default()` leads to dropping uninitialized `T`, when it is invoked from `common::Slice::<T, H>::new()`.
Panic within `T::drop()` leads to double drop of `T`, when it is invoked either from `common::SliceVec::<T, H>::resize_with()` or `common::SliceVec::<T, H>::resize()`
Either case causes memory corruption in the heap memory.