Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0103
HistoryDec 31, 2020 - 12:00 p.m.

`impl Random` on arrays can lead to dropping uninitialized memory

2020-12-3112:00:00
Google
osv.dev
6
memory corruption
panics
undefined behavior
rust
commit 565d508

EPSS

0.001

Percentile

20.2%

Affected versions of this crate had a panic safety issue to drop partially uninitialized array of T upon panic in a user provided function T::random(). Dropping uninitialized T can potentially cause memory corruption or undefined behavior.

The flaw was corrected in commit 565d508 by using MaybeUninit<T> to avoid possible dropping of uninitialized memory upon panic.

EPSS

0.001

Percentile

20.2%

Related for OSV:RUSTSEC-2020-0103