Add advisory for invalid pointer dereference in fmt::Pointer impl for

crossbeam_epoch::{Atomic,Shared}
This commit is contained in:
Taiki Endo
2026-07-07 03:32:22 +09:00
committed by Adam Harvey
parent 575d6923ad
commit b86f52d2f9

View File

@@ -0,0 +1,17 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "crossbeam-epoch"
date = "2026-07-06"
url = "https://github.com/crossbeam-rs/crossbeam/pull/1276"
keywords = ["NULL-pointer-dereference"]
aliases = []
[versions]
patched = [">= 0.9.20"]
unaffected = ["< 0.9.0"]
```
# Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Affected versions of `fmt::Display` dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with `Atomic::null` or `Shared::null`. `fmt::Debug` impls and pre-0.9 `fmt::Display` impls, which do not dereference pointers, are not affected by this issue.