File tree Expand file tree Collapse file tree 1 file changed +22
-0
lines changed Expand file tree Collapse file tree 1 file changed +22
-0
lines changed Original file line number Diff line number Diff line change
1
+ ``` toml
2
+ [advisory ]
3
+ id = " RUSTSEC-0000-0000"
4
+ package = " uu_od"
5
+ date = " 2021-02-17"
6
+ url = " https://github.com/uutils/coreutils/issues/1729"
7
+ categories = [" memory-exposure" ]
8
+
9
+ [versions ]
10
+ patched = [" >= 0.0.4" ]
11
+ ```
12
+
13
+ # PartialReader passes uninitialized memory to user-provided Read
14
+
15
+ Affected versions of this crate passed an uniniitalized buffer to a
16
+ user-provided ` Read ` instance in ` PartialReader::read ` .
17
+
18
+ This can result in safe ` Read ` implementations reading from the uninitialized
19
+ buffer leading to undefined behavior.
20
+
21
+ The flaw was fixed in commit [ ` 39d62c6 ` ] ( https://github.com/uutils/coreutils/commit/39d62c6c1f809022c903180471c10fde6ecd12d1 )
22
+ by zero-initializing the passed buffer.
You can’t perform that action at this time.
0 commit comments