mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-02-15 22:04:38 +01:00
64c17acfe3
As announced in #228, this commit migrates all advisories to the new V2 format, which splits version information into a separate section, and now has a structure which corresponds to the internal code structure of the `rustsec` crate. This is a breaking change for users of `cargo-audit` < 0.9, and anyone who has written a 3rd party advisory format parser.
20 lines
888 B
TOML
20 lines
888 B
TOML
[advisory]
|
|
id = "RUSTSEC-2019-0020"
|
|
package = "generator"
|
|
date = "2019-09-06"
|
|
title = "fix unsound APIs that could lead to UB"
|
|
url = "https://github.com/Xudong-Huang/generator-rs/issues/9"
|
|
keywords = ["memory-corruption"]
|
|
description = """
|
|
Affected versions of this crate API could use uninitialized memory with some APIs in special
|
|
cases, like use the API in none generator context. This could lead to UB.
|
|
The flaw was corrected by <https://github.com/Xudong-Huang/generator-rs/issues/9>
|
|
<https://github.com/Xudong-Huang/generator-rs/issues/11>
|
|
<https://github.com/Xudong-Huang/generator-rs/issues/13>
|
|
<https://github.com/Xudong-Huang/generator-rs/issues/14>
|
|
This patch fixes all those issues above.
|
|
"""
|
|
|
|
[versions]
|
|
patched = [">= 0.6.18"]
|