| { |
| "item_id": "ker-odoh_split", |
| "kernel": "odoh_split", |
| "advisory": "RUSTSEC-2023-0095", |
| "crate": "odoh-rs", |
| "pre_version": "1.0.1", |
| "post_version": "1.0.2", |
| "advisory_url": "https://github.com/cloudflare/odoh-rs/pull/28", |
| "title": "Invalid Slice Split Results in Server Panic", |
| "source_file": "src/protocol.rs", |
| "function": "encrypted_payload_len", |
| "signature": "pub fn encrypted_payload_len(msg: &[u8], key_size: usize) -> Result<usize, u8>", |
| "spec_doc": "Splits an encrypted ODoH query into an encapsulated key (first key_size bytes) and ciphertext (the rest); returns the ciphertext length, or Err if the message is shorter than key_size. Must not panic on any input.", |
| "bug_class": "panic", |
| "fidelity": "model_of_std", |
| "extraction_note": "src/protocol.rs decrypt_query: split_at(key_size) without length check", |
| "witness_args": "&[1u8, 2, 3], 32usize", |
| "labels": { |
| "buggy": "odoh-rs@1.0.1", |
| "reference": "odoh-rs@1.0.2" |
| } |
| } |
