Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2023/07/19 10:9 p.m.18 views

impl `FromMdbValue` for bool is unsound

The implementation of FromMdbValue has several unsoundness issues. First of all, it allows to reinterpret arbitrary bytes as a bool and could make undefined behavior happen with safe function. Secondly, it allows transmuting pointer without taking memory layout into consideration. The details of...

6.9AI score
SaveExploits0References3Affected Software1
RustSec
RustSec
added 2020/04/11 12:0 p.m.37 views

`read_scalar` and `read_scalar_at` allow transmuting values without `unsafe` blocks

The readscalar and readscalarat functions are unsound because they allow transmuting values without unsafe blocks. The following example shows how to create a dangling reference: fn main deriveCopy, Clone, PartialEq, Debug struct S&'static str; impl flatbuffers::EndianScalar for S fn...

7.5CVSS4.1AI score0.00583EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2020/04/11 12:0 p.m.62 views

RUSTSEC-2020-0009 `read_scalar` and `read_scalar_at` allow transmuting values without `unsafe` blocks

The readscalar and readscalarat functions are unsound because they allow transmuting values without unsafe blocks. The following example shows how to create a dangling reference: fn main deriveCopy, Clone, PartialEq, Debug struct S&'static str; impl flatbuffers::EndianScalar for S fn...

7.5CVSS7.4AI score0.00583EPSS
SaveExploits1References3
Rows per page
Query Builder