Files
advisory-db/crates/failure/RUSTSEC-2019-0036.toml
2020-08-14 23:04:44 +00:00

21 lines
579 B
TOML

[advisory]
id = "RUSTSEC-2019-0036"
package = "failure"
date = "2019-11-13"
informational = "unsound"
title = "Type confusion if __private_get_type_id__ is overriden"
url = "https://github.com/rust-lang-nursery/failure/issues/336"
keywords = ["unsound"]
description = """
Safe Rust code can implement malfunctioning `__private_get_type_id__` and cause
type confusion when downcasting, which is an undefined behavior.
Users who derive `Fail` trait are not affected.
"""
[affected]
functions = { "failure::Fail::__private_get_type_id__" = [">= 0.1.0"] }
[versions]
patched = []