GHSA-rccq-j2m7-8fwr

Double-free in id-map

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-30457

Packages

Ecosystem	Package	Affected	Fixed in
crates.io	id-map	<= 0.2.1	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A double free can occur in remove_set upon a panic in a Drop impl. When removing a set of elements, ptr::drop_in_place is called on each of the element to be removed. If the Drop impl of one of these elements panics then the previously dropped elements can be dropped again.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-30457 advisory
https://github.com/andrewhickman/id-map/issues/3 web
https://github.com/andrewhickman/id-map package
https://rustsec.org/advisories/RUSTSEC-2021-0052.html web