bdk icon indicating copy to clipboard operation
bdk copied to clipboard

RUSTSEC-2022-0046: Out-of-bounds read when opening multiple column families with TTL

Open github-actions[bot] opened this issue 3 years ago • 1 comments

Out-of-bounds read when opening multiple column families with TTL

Details
Package rocksdb
Version 0.14.0
URL https://github.com/rust-rocksdb/rust-rocksdb/pull/616
Date 2022-05-11
Patched versions >=0.19.0

Affected versions of this crate called the RocksDB C API rocksdb_open_column_families_with_ttl() with a pointer to a single integer TTL value, but one TTL value for each column family is expected.

This is only relevant when using rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl() with multiple column families.

This bug has been fixed in v0.19.0.

See advisory page for additional details.

github-actions[bot] avatar Aug 14 '22 02:08 github-actions[bot]

see comments in #724

notmandatory avatar Aug 26 '22 02:08 notmandatory