Lucene search

K
rustsecRustsecRUSTSEC-2021-0008
HistoryJan 02, 2021 - 12:00 p.m.

reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)

2021-01-0212:00:00
rustsec.org
4

0.005 Low

EPSS

Percentile

75.6%

Affected versions of this crate creates an uninitialized buffer and passes it to user-provided Read implementation.

This is unsound, because it allows safe Rust code to exhibit an undefined behavior (read from uninitialized memory).

The flaw was corrected in version 0.1.1 by zero-initializing a newly allocated buffer
before handing it to a user-provided Read implementation.

CPENameOperatorVersion
bralt0.1.1

0.005 Low

EPSS

Percentile

75.6%

Related for RUSTSEC-2021-0008