rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2025-12-27 01:54:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

add wrflib

Browse Source
This commit is contained in:
Shihao Xia
2025-10-03 09:49:24 -04:00
committed by Dirkjan Ochtman
parent f71b77f025
commit 16eeb9a536
1 changed files with 40 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
crates/wrflib/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,40 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "wrflib"
date = "2025-10-02"
informational = "unsound"
url = "https://github.com/cruise-automation/webviz-rust-framework"
categories = ["memory-corruption"]
[affected.functions]
"wrflib::byte_extract::get_f32_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_f32_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_f64_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_f64_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i8_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i8_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i16_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i16_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i32_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i32_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i64_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_i64_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u8_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u8_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u16_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u16_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u32_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u32_le_as_f32" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u64_le" = ["<= 0.0.3"]
"wrflib::byte_extract::get_u64_le_as_f32" = ["<= 0.0.3"]
[versions]
patched = []
unaffected = []
```
# soundness issue and unmaintained
All functions under `wrflib::byte_extract` are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter.
`wrflib` is unmaintained.