Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0009
HistoryJan 10, 2021 - 12:00 p.m.

panic safety issue in `impl TransformContent<S, D> for [S; (2|3|4)]`

2021-01-1012:00:00
Google
osv.dev
7
safety issue
transformcontent
memory corruption
ptr::read()
manuallydrop

EPSS

0.001

Percentile

45.3%

Affected versions of this crate did not guard against double drop while temporarily duplicating objects’ ownership using ptr::read(). Upon panic in a user-provided function conversion, objects that are copied by ptr::read() are dropped twice, leading to memory corruption.

The flaw was corrected in v0.9.2 by using ManuallyDrop&lt;T&gt; to enclose objects that are to be temporarily duplicated.

EPSS

0.001

Percentile

45.3%

Related for OSV:RUSTSEC-2021-0009