Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/04/17 4:32 p.m.19 views

Parsing borsh messages with ZST which are not-copy/clone is unsound

Affected versions of borsh cause undefined behavior when zero-sized-types ZST are parsed and the Copy/Clone traits are not implemented/derived. For instance if 1000 instances of a ZST are deserialized, and the ZST is not copy this can be achieved through a singleton, then accessing/writing to...

6.5AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder