Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

RUSTSEC-2020-0159: Potential segfault in localtime_r invocations #4

Closed
github-actions bot opened this issue Oct 19, 2021 · 1 comment
Closed

RUSTSEC-2020-0159: Potential segfault in localtime_r invocations #4

github-actions bot opened this issue Oct 19, 2021 · 1 comment

Comments

@github-actions
Copy link

Potential segfault in localtime_r invocations

Details
Package chrono
Version 0.4.19
URL chronotope/chrono#499
Date 2020-11-10

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References

See advisory page for additional details.
@jrose-signal
Copy link
Contributor

We no longer depend on chrono (directly or indirectly).

@expiringplatform expiringplatform mentioned this issue Jun 13, 2023
Closed
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jrose-signal