From d2aaa6c1b2685b89d43ae7d1024c19436f05c876 Mon Sep 17 00:00:00 2001 From: Yechan Bae Date: Thu, 3 Sep 2020 23:56:02 -0400 Subject: [PATCH] Initial report for 0013-simple-slab --- crates/simple-slab/RUSTSEC-0000-0000.toml | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 crates/simple-slab/RUSTSEC-0000-0000.toml diff --git a/crates/simple-slab/RUSTSEC-0000-0000.toml b/crates/simple-slab/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..2dd0a97 --- /dev/null +++ b/crates/simple-slab/RUSTSEC-0000-0000.toml @@ -0,0 +1,12 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "simple-slab" +date = "2020-09-03" +title = "`index()` allows out-of-bound read and `remove()` has off-by-one error" +url = "https://github.com/nathansizemore/simple-slab/issues/2" +description = """ +`Slab::index()` does not perform the boundary checking, which leads to out-of-bound read access. `Slab::remove()` copies an element from an invalid address due to off-by-one error, resulting in memory leakage and uninitialized memory drop. +""" + +[versions] +patched = []