From efb79effca7485f66970511fed21066ddb09d0d7 Mon Sep 17 00:00:00 2001 From: JOE1994 Date: Mon, 18 Jan 2021 15:41:35 -0500 Subject: [PATCH] report double drop issue in glsl-layout --- crates/glsl-layout/RUSTSEC-0000-0000.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 crates/glsl-layout/RUSTSEC-0000-0000.md diff --git a/crates/glsl-layout/RUSTSEC-0000-0000.md b/crates/glsl-layout/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..094e2d4 --- /dev/null +++ b/crates/glsl-layout/RUSTSEC-0000-0000.md @@ -0,0 +1,19 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "glsl-layout" +date = "2021-01-10" +url = "https://github.com/rustgd/glsl-layout/pull/10" +categories = ["memory-corruption"] + +[versions] +patched = [">= 0.4.0"] +``` + +# Double drop upon panic in 'fn map_array()' + +Affected versions of this crate did not guard against panic within the user-provided function `f` (2nd parameter of `fn map_array`), and thus panic within `f` +causes double drop of a single object. + +The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable +to a double drop within `ManuallyDrop`.