Lucene search

K
rustsecRustsecRUSTSEC-2021-0077
HistoryJul 22, 2021 - 12:00 p.m.

`better-macro` has deliberate RCE to prove a point

2021-07-2212:00:00
rustsec.org
9
fake crate
deliberate rce
proc-macros
arbitrary code
no useful functionality

EPSS

0.008

Percentile

82.2%

better-macro is a fake crate which is
“Proving A Point” that proc-macros can run arbitrary code. This is not a particularly
novel or interesting observation.

It currently opens https://github.com/raycar5/better-macro/blob/master/doc/hi.md
which doesn’t appear to have any malicious content, but there’s no guarantee that
will remain the case.

This crate has no useful functionality, and should not be used.

EPSS

0.008

Percentile

82.2%

Related for RUSTSEC-2021-0077