Lucene search

K
rustsecRustsecRUSTSEC-2021-0010
HistoryJan 12, 2021 - 12:00 p.m.

panic safety: double drop may happen within `util::{mutate, mutate2}`

2021-01-1212:00:00
rustsec.org
4

0.005 Low

EPSS

Percentile

76.9%

Upon panic in a user-provided function f, fn mutate() & fn mutate2 drops twice a same object.

Affected versions of this crate did not guard against double drop while temporarily duplicating an object’s ownership with ptr::read().

Dropping a same object can result in memory corruption.

The flaw was corrected in version “0.9.11” by fixing the code to abort upon panic.

CPENameOperatorVersion
containerslt0.9.11

0.005 Low

EPSS

Percentile

76.9%

Related for RUSTSEC-2021-0010