OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-31 16:50:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #253 from myrrlyn/master

Browse Source 
Report memory management error in `bitvec`
This commit is contained in:
Tony Arcieri
2020-03-30 11:02:11 -07:00
committed by GitHub
parent de905c8bfe 70389f6a25
commit f37a7bf90a
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
crates/bitvec/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,16 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "bitvec"
date = "2020-03-27"
title = "use-after or double free of allocated memory"
url = "https://github.com/myrrlyn/bitvec/issues/55"
categories = ["memory-corruption"]
description = """
Conversion of `BitVec` to `BitBox` did not account for allocation movement.
The flaw was corrected by using the address after resizing, rather than the original base address.
"""
functions = { "bitvec::vec::BitVec::into_boxed_bitslice" = ["< 0.17.4, >= 0.11.0"] }
[versions]
patched = [">= 0.17.4"]
unaffected = ["< 0.11.0"]