Skip to content

Commit

Permalink
Merge pull request #568 from JOE1994/glsl-layout
Browse files Browse the repository at this point in the history
glsl-layout: double drop upon panic in 'fn map_array'
  • Loading branch information
Shnatsel authored Jan 18, 2021
2 parents 854d300 + efb79ef commit 4e1c5c4
Showing 1 changed file with 19 additions and 0 deletions.
19 changes: 19 additions & 0 deletions crates/glsl-layout/RUSTSEC-0000-0000.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "glsl-layout"
date = "2021-01-10"
url = "https://github.com/rustgd/glsl-layout/pull/10"
categories = ["memory-corruption"]

[versions]
patched = [">= 0.4.0"]
```

# Double drop upon panic in 'fn map_array()'

Affected versions of this crate did not guard against panic within the user-provided function `f` (2nd parameter of `fn map_array`), and thus panic within `f`
causes double drop of a single object.

The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable
to a double drop within `ManuallyDrop<T>`.

0 comments on commit 4e1c5c4

Please sign in to comment.