Lucene search

K
osvGoogleOSV:GHSA-Q948-X8RF-888M
HistoryAug 25, 2021 - 8:47 p.m.

os_str_bytes relies on undefined behavior of `char::from_u32_unchecked`

2021-08-2520:47:55
Google
osv.dev
4
os_str_bytes
undefined behavior
security issue
version 2.0.0
rust versions

EPSS

0.001

Percentile

42.5%

The Windows implementation of this crate relied on the behavior of std::char::from_u32_unchecked when its safety clause is violated. Even though this worked with Rust versions up to 1.42 (at least), that behavior could change with any new Rust version, possibly leading a security issue.

The flaw was corrected in version 2.0.0.

EPSS

0.001

Percentile

42.5%

Related for OSV:GHSA-Q948-X8RF-888M