~ / search / GHSA-8mjx-h23h-w2pg

GHSA-8mjx-h23h-w2pg

Double free in stack_dst

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-28034

Packages

EcosystemPackageAffectedFixed in
crates.io stack_dst < 0.6.1 0.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of stack_dst used a push_inner function that increased the internal length of the array and then called val.clone(). If the val.clone() call panics, the stack could drop an already dropped element or drop uninitialized memory. This issue was fixed in `2a4d538` by increasing the length of the array after elements are cloned.

References

External links from the advisory. They lead to third-party sites.