Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f9g6-fp84-fv92

Опубликовано: 19 июл. 2023
Источник: github
Github: Прошло ревью

Описание

impl FromMdbValue for bool is unsound

The implementation of FromMdbValue has several unsoundness issues. First of all, it allows to reinterpret arbitrary bytes as a bool and could make undefined behavior happen with safe function. Secondly, it allows transmuting pointer without taking memory layout into consideration. The details of reproducing the bug are available here.

Пакеты

Наименование

lmdb-rs

rust
Затронутые версииВерсия исправления

<= 0.7.6

Отсутствует