Skip to content
This repository has been archived by the owner on Dec 19, 2021. It is now read-only.

RUSTSEC-2020-0049: Use-after-free in Framed due to lack of pinning #38

Closed
github-actions bot opened this issue Sep 27, 2020 · 0 comments
Closed

Comments

@github-actions
Copy link

Use-after-free in Framed due to lack of pinning

Details
Package actix-codec
Version 0.2.0
URL actix/actix-net#91
Date 2020-01-30
Patched versions >= 0.3.0-beta.1

Affected versions of this crate did not require the buffer wrapped in Framed to be pinned,
but treated it as if it had a fixed location in memory. This may result in a use-after-free.

The flaw was corrected by making the affected functions accept Pin<&mut Self> instead of &mut self.

See advisory page for additional details.

@ChriFo ChriFo closed this as completed in b044f60 Sep 27, 2020
ChriFo added a commit that referenced this issue Sep 29, 2020
- Closes #39
- Closes #38
- Closes #34
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

0 participants