Описание
orx-pinned-vec has undefined behavior in index_of_ptr with empty slices
The safe function index_of_ptr causes undefined behavior when called with an empty slice.
The issue occurs in the line ptr.add(slice.len() - 1) which underflows when slice.len() is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate undefined behavior.
Пакеты
Наименование
orx-pinned-vec
rust
Затронутые версииВерсия исправления
< 3.21.0
3.21.0
2 Low
CVSS4
Дефекты
CWE-119
CWE-191
2 Low
CVSS4
Дефекты
CWE-119
CWE-191