OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-07 04:01:35 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
d8701fad2d40aeca8e8564692f14a8d7c30a5136
advisory-db/crates/failure/RUSTSEC-2019-0036.md
Alexis Mousset e9382c8680 Fix typos in advisories (#976)
2021-08-21 19:18:11 -06:00

605 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2019-0036"
package = "failure"
aliases = ["CVE-2020-25575", "CVE-2019-25010"]
date = "2019-11-13"
informational = "unsound"
keywords = ["unsound"]
url = "https://github.com/rust-lang-nursery/failure/issues/336"

[affected.functions]
"failure::Fail::__private_get_type_id__" = [">= 0.1.0"]

[versions]
patched = []

Type confusion if private_get_type_id is overridden

Safe Rust code can implement malfunctioning __private_get_type_id__ and cause type confusion when downcasting, which is an undefined behavior.

Users who derive Fail trait are not affected.