GHSA-cx4j-fxr7-jxg8
Double free in glsl-layout
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| crates.io | glsl-layout | < 0.4.0 | 0.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Affected versions of this crate did not guard against panic within the user-provided function f (2nd parameter of fn map_array), and thus panic within f causes double drop of a single object.
The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable to a double drop within ManuallyDrop<T>.
References
External links from the advisory. They lead to third-party sites.