ProjectEulerRust icon indicating copy to clipboard operation
ProjectEulerRust copied to clipboard

RUSTSEC-2024-0357: `MemBio::get_buf` has undefined behavior with empty buffers

Open github-actions[bot] opened this issue 7 months ago • 0 comments

Details
Package openssl
Version 0.10.64
URL https://github.com/sfackler/rust-openssl/pull/2266
Patched Versions >=0.10.66

Previously, MemBio::get_buf called slice::from_raw_parts with a null-pointer, which violates the functions invariants, leading to undefined behavior. In debug builds this would produce an assertion failure. This is now fixed.

github-actions[bot] avatar Jul 23 '24 10:07 github-actions[bot]