mirror of
https://github.com/rustsec/advisory-db.git
synced 2025-12-27 01:54:07 -05:00
anon-vec: insufficient checks in public API
This commit is contained in:
committed by
Dirkjan Ochtman
parent
7727c950e4
commit
9c71181231
29
crates/anon-vec/RUSTSEC-0000-0000.md
Normal file
29
crates/anon-vec/RUSTSEC-0000-0000.md
Normal file
@@ -0,0 +1,29 @@
|
||||
```toml
|
||||
[advisory]
|
||||
id = "RUSTSEC-0000-0000"
|
||||
package = "anon-vec"
|
||||
date = "2025-05-06"
|
||||
informational = "unsound"
|
||||
url = "https://github.com/RylanYancey/anon-vec"
|
||||
categories = ["memory-corruption"]
|
||||
|
||||
[affected.functions]
|
||||
"anon_vec::AnonVec::get_ref" = ["<= 0.1.1"]
|
||||
"anon_vec::AnonVec::get_mut" = ["<= 0.1.1"]
|
||||
"anon_vec::AnonVec::remove_get" = ["<= 0.1.1"]
|
||||
|
||||
[versions]
|
||||
patched = []
|
||||
unaffected = []
|
||||
```
|
||||
|
||||
# Lack of sufficient checks in public API
|
||||
|
||||
The following functions in the anon-vec crate are unsound due to insufficient checks on their
|
||||
arguments::
|
||||
|
||||
- `AnonVec::get_ref()`
|
||||
- `AnonVec::get_mut()`
|
||||
- `AnonVec::remove_get()`
|
||||
|
||||
The crate was built as a learning project and is not being maintained.
|
||||
Reference in New Issue
Block a user