Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0037
HistoryAug 31, 2020 - 12:00 p.m.

Misbehaving `HandleLike` implementation can lead to memory safety violation

2020-08-3112:00:00
Google
osv.dev
6
handlelike
objectpool
handlepool
memory safety violation
toctou
bug

EPSS

0.002

Percentile

60.7%

Unsafe code in ObjectPool has time-of-check to time-of-use (TOCTOU) bug that
can eventually lead to a memory safety violation. ObjectPool and HandlePool
implicitly assumes that HandleLike trait methods are pure, i.e., they always
return the same value. However, this assumption is unsound since HandleLike
is a safe, public trait that allows a custom implementation.

EPSS

0.002

Percentile

60.7%

Related for OSV:RUSTSEC-2020-0037