Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/12/04 6:31 p.m.15 views

Unsoundness in anstream

When given a valid UTF8 string "ö\x1b😀", the function in crates/anstream/src/adapter/strip.rs will be confused. The UTF8 bytes are \xc3\xb6 then \x1b then \xf0\x9f\x98\x80. When looping over "non-printable bytes" \x1b\xf0 will be considered as some non-printable sequence. This will produce a brok...

7.2AI score
SaveExploits0References3Affected Software1
RustSec
RustSec
added 2024/01/13 12:0 p.m.8 views

Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8

Affected versions receive a &u8 from the caller through a safe API, and pass it directly to the unsafe str::fromutf8unchecked function. The behavior of ferrissays::say is undefined if the bytes from the caller don't happen to be valid UTF-8. The flaw was corrected in ferris-says21 by using the sa...

7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder