Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0051
HistoryJan 31, 2021 - 12:00 p.m.

KeyValueReader passes uninitialized memory to Read instance

2021-01-3112:00:00
Google
osv.dev
4
keyvaluereader
uninitialized memory
read instance
undefined behavior
miscompilations
zero-initializing buffers
software

EPSS

0.002

Percentile

60.7%

The KeyValueReader type in affected versions of this crate set up an
uninitialized memory buffer and passed them to be read in to a user-provided
Read instance.

The Read instance could read uninitialized memory and cause undefined
behavior and miscompilations.

This issue was fixed in commit dd59b30
by zero-initializing the buffers before passing them.

EPSS

0.002

Percentile

60.7%

Related for OSV:RUSTSEC-2021-0051