Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/07/25 4:38 p.m.17 views

The kstring integration in gix-attributes is unsound

gix-attributes in state::ValueRef unsafely creates a &str from a &u8 containing non-UTF8 data, with the justification that so long as nothing reads the &str and relies on it being UTF-8 in the &str, there is no UB: rust // SAFETY: our API makes accessing that value as str impossible, so illformed...

7AI score
SaveExploits0References5Affected Software1
RustSec
RustSec
added 2024/07/24 12:0 p.m.8 views

The kstring integration in gix-attributes is unsound

gix-attributes in state::ValueRef unsafely creates a &str from a &u8 containing non-UTF8 data, with the justification that so long as nothing reads the &str and relies on it being UTF-8 in the &str, there is no UB: rust // SAFETY: our API makes accessing that value as str impossible, so illformed...

7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder