File size: 857 Bytes
4951e76 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 | {
"item_id": "ker-stack_insert",
"kernel": "stack_insert",
"advisory": "RUSTSEC-2020-0042",
"crate": "stack",
"pre_version": "0.3.0",
"post_version": "0.3.1",
"advisory_url": "https://github.com/arcnmx/stack-rs/issues/4",
"title": "Missing check in ArrayVec leads to out-of-bounds write.",
"source_file": "src/vector.rs",
"function": "insert_shift_len",
"signature": "pub fn insert_shift_len(len: usize, index: usize) -> Result<usize, u8>",
"spec_doc": "Number of elements to shift when inserting at index into a vector of length len; Err if index > len.",
"bug_class": "panic",
"fidelity": "model_of_std",
"extraction_note": "src/vector.rs insert: missing index <= len assert; copy length len - index wrapped (release) -> OOB write",
"witness_args": "3usize, 5usize",
"labels": {
"buggy": "stack@0.3.0",
"reference": "stack@0.3.1"
}
} |