Yet another arrow advisory (#1059)

* Create RUSTSEC-0000-0000.md

* remove references to writes
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-09-29 18:00:36 +02:00
committed by GitHub
parent a9bf472713
commit f2e3a65042

View File

@@ -0,0 +1,16 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "arrow"
date = "2021-09-14"
url = "https://github.com/apache/arrow-rs/issues/774"
categories = ["memory-exposure"]
keywords = ["buffer-overflow"]
[versions]
patched = []
```
# `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets
`FixedSizeBinaryArray` performs insufficient bounds checks, which allows out-of-bounds reads in safe code.