OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-31 08:40:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #606 from JOE1994/0108-containers

Browse Source 
containers: panic safety: double drop may happen within `util::{mutate, mutate2}`
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-20 20:22:32 +01:00
committed by GitHub
parent 3e390e41e5 b1160c6794
commit e60666e1bc
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
crates/containers/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,21 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "containers"
date = "2021-01-12"
url = "https://github.com/strake/containers.rs/issues/2"
categories = ["memory-corruption"]
[versions]
patched = [">= 0.9.11"]
```
# panic safety: double drop may happen within `util::{mutate, mutate2}`
Upon panic in a user-provided function `f`, `fn mutate()` & `fn mutate2` drops twice a same object.
Affected versions of this crate did not guard against double drop while temporarily duplicating an object's ownership with `ptr::read()`.
Dropping a same object can result in memory corruption.
The flaw was corrected in version "0.9.11" by fixing the code to abort upon panic.