Files
advisory-db/crates/algorithmica/RUSTSEC-2021-0053.md
2021-04-15 10:46:46 -07:00

17 lines
538 B
Markdown

```toml
[advisory]
id = "RUSTSEC-2021-0053"
package = "algorithmica"
date = "2021-03-07"
url = "https://github.com/AbrarNitk/algorithmica/issues/1"
categories = ["memory-corruption"]
[versions]
patched = []
```
# 'merge_sort::merge()' crashes with double-free for `T: Drop`
In the affected versions of this crate, `merge_sort::merge()` wildly duplicates and drops ownership of `T` without guarding against double-free. Due to such implementation,
simply invoking `merge_sort::merge()` on `Vec<T: Drop>` can cause **double free** bugs.