OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-26 16:07:48 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
advisory-db/crates/libpulse-binding/RUSTSEC-2019-0038.md
Alexis Mousset 84c633df9c Update aliases from GHSA OSV export (#1693)
2023-06-13 15:10:24 +02:00

732 B
Raw Permalink Blame History 

[advisory]
id = "RUSTSEC-2019-0038"
package = "libpulse-binding"
date = "2019-03-10"
url = "https://github.com/jnqnfe/pulse-binding-rust/commit/7fd282aef7787577c385aed88cb25d004b85f494"
categories = ["memory-corruption"]
informational = "unsound"
aliases = ["CVE-2019-25055", "GHSA-wcxc-jf6c-8rx9", "GHSA-xvcg-2q82-r87j"]

[versions]
patched = [">= 2.6.0"]

Fix for UB in failure to catch panics crossing FFI boundaries

Affected versions of this crate failed to catch panics crossing FFI boundaries via callbacks, which is a form of UB. This flaw was corrected by this commit which was included in version 2.6.0.