wundergraph icon indicating copy to clipboard operation
wundergraph copied to clipboard

RUSTSEC-2020-0049: Use-after-free in Framed due to lack of pinning

Open github-actions[bot] opened this issue 5 years ago • 0 comments

Use-after-free in Framed due to lack of pinning

Details
Package actix-codec
Version 0.1.2
URL https://github.com/actix/actix-net/issues/91
Date 2020-01-30
Patched versions >= 0.3.0-beta.1

Affected versions of this crate did not require the buffer wrapped in Framed to be pinned, but treated it as if it had a fixed location in memory. This may result in a use-after-free.

The flaw was corrected by making the affected functions accept Pin<&mut Self> instead of &mut self.

See advisory page for additional details.

github-actions[bot] avatar Sep 29 '20 00:09 github-actions[bot]