Files
advisory-db/crates/renderdoc/RUSTSEC-2019-0018.toml
Sergey "Shnatsel" Davidoff 7797133c67 Add CVE mapping
2020-03-18 17:15:13 +01:00

26 lines
859 B
TOML

[advisory]
id = "RUSTSEC-2019-0018"
package = "renderdoc"
date = "2019-09-02"
title = "Internally mutating methods take immutable ref self"
url = "https://github.com/ebkalderon/renderdoc-rs/pull/32"
keywords = ["undefined_behavior"]
description = """
Affected versions of this crate exposed several methods which took `self` by
immutable reference, despite the requesting the RenderDoc API to set a mutable
value internally.
This is technically unsound and calling these methods from multiple threads
without synchronization could lead to unexpected and unpredictable behavior.
The flaw was corrected in release 0.5.0.
"""
aliases = ["CVE-2019-16142"]
[affected.functions]
"renderdoc::api::RenderDocV110::trigger_multi_frame_capture" = ["< 0.5.0"]
"renderdoc::api::RenderDocV120::set_capture_file_comments" = ["< 0.5.0"]
[versions]
patched = [">= 0.5.0"]