Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8v3-jhv9-4ppc

Опубликовано: 23 янв. 2024
Источник: github
Github: Прошло ревью

Описание

Use-after-free when setting the locale

Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale. It stores the locale as a raw pointer to an Arc<String>. The locale can be read with AtomicStr::as_str(). AtomicStr::as_str() does not increment the usage counter of the Arc.

If the locale is changed in one thread, another thread can have a stale -- possibly already freed -- reference to the stored string.

Пакеты

Наименование

rust-i18n-support

rust
Затронутые версииВерсия исправления

>= 3.0.0, < 3.0.1

3.0.1

Дефекты

CWE-416

Дефекты

CWE-416