~ / search / GHSA-9pqx-g3jh-qpqq

GHSA-9pqx-g3jh-qpqq

Dangling reference in `access::Map` with Constant

Source: GitHub Advisory Database (reviewed) High CVE-2020-35711

Packages

EcosystemPackageAffectedFixed in
crates.io arc-swap >= 0.4.2, < 0.4.8 0.4.8
crates.io arc-swap >= 1.0.0, < 1.1.0 1.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or with a user-supplied implementation of the Access trait) could sometimes lead to dangling references being returned by the map.

References

External links from the advisory. They lead to third-party sites.