Skip to content

Commit 6265d0d

Browse files
authored
Add advisory for uninitialized exposure in uu_od (#836)
1 parent cc8f4f0 commit 6265d0d

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

crates/uu_od/RUSTSEC-0000-0000.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
```toml
2+
[advisory]
3+
id = "RUSTSEC-0000-0000"
4+
package = "uu_od"
5+
date = "2021-02-17"
6+
url = "https://github.com/uutils/coreutils/issues/1729"
7+
categories = ["memory-exposure"]
8+
9+
[versions]
10+
patched = [">= 0.0.4"]
11+
```
12+
13+
# PartialReader passes uninitialized memory to user-provided Read
14+
15+
Affected versions of this crate passed an uniniitalized buffer to a
16+
user-provided `Read` instance in `PartialReader::read`.
17+
18+
This can result in safe `Read` implementations reading from the uninitialized
19+
buffer leading to undefined behavior.
20+
21+
The flaw was fixed in commit [`39d62c6`](https://github.com/uutils/coreutils/commit/39d62c6c1f809022c903180471c10fde6ecd12d1)
22+
by zero-initializing the passed buffer.

0 commit comments

Comments
 (0)