OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-03 10:05:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #682 from davidkna/patch-1

Browse Source 
sys-info: Add patched version for RUSTSEC-2020-0100
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-25 14:19:04 +01:00
committed by GitHub
parent 0290f2ba88 99758fa158
commit bf96ab9fd9
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
crates/sys-info/RUSTSEC-2020-0100.md
View File

@@ -8,7 +8,7 @@ categories = ["memory-corruption"]
keywords = ["concurrency", "double free"]
[versions]
patched = []
patched = [">= 0.8.0"]
unaffected = []
[affected]
@@ -23,5 +23,7 @@ Affected versions of `sys-info` use a static, global, list to store temporary di
This results in consistent double-frees and segfaults when calling `sys_info::disk_info` from multiple threads at once.
The issue was fixed by moving the global variable into a local scope.
## Safer Alternatives:
- [`sysinfo`](https://crates.io/crates/sysinfo)