diff --git a/crates/arenavec/RUSTSEC-0000-0000.md b/crates/arenavec/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..f71a26a63 --- /dev/null +++ b/crates/arenavec/RUSTSEC-0000-0000.md @@ -0,0 +1,20 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "arenavec" +date = "2021-01-12" +url = "https://github.com/ibabushkin/arenavec/issues/1" +categories = ["memory-corruption"] + +[versions] +patched = [] +``` + +# panic safety: double drop or uninitialized drop of T upon panic + +Affected versions of this crate did not guard against potential panics that may happen from user-provided functions `T::default()` and `T::drop()`. + +Panic within `T::default()` leads to dropping uninitialized `T`, when it is invoked from `common::Slice::::new()`. +Panic within `T::drop()` leads to double drop of `T`, when it is invoked either from `common::SliceVec::::resize_with()` or `common::SliceVec::::resize()` + +Either case causes memory corruption in the heap memory.