Lucene search

K
rustsecRustsecRUSTSEC-2019-0011
HistoryJul 16, 2019 - 12:00 p.m.

Flaw in offset_of and span_of causes SIGILL, drops uninitialized memory of arbitrary type on panic in client code

2019-07-1612:00:00
rustsec.org
7

0.001 Low

EPSS

Percentile

51.3%

Affected versions of this crate caused traps and/or memory unsafety by zero-initializing references.
They also could lead to uninitialized memory being dropped if the field for which the offset is requested was behind a deref coercion, and that deref coercion caused a panic.

The flaw was corrected by using MaybeUninit.

CPENameOperatorVersion
memoffsetlt0.5.0

0.001 Low

EPSS

Percentile

51.3%