| { | |
| "item_id": "ker-phone_ctx", | |
| "kernel": "phone_ctx", | |
| "advisory": "RUSTSEC-2023-0082", | |
| "crate": "phonenumber", | |
| "pre_version": "0.2.4+8.11.3", | |
| "post_version": "0.2.5+8.11.3", | |
| "advisory_url": "https://github.com/whisperfish/rust-phonenumber/commit/2dd44be94539c051b4dee55d1d9d349bd7bedde6", | |
| "title": "phonenumber: panic on parsing crafted RF3966 phonenumber inputs ", | |
| "source_file": "src/parser/rfc3966.rs", | |
| "function": "context_prefix_skip", | |
| "signature": "pub fn context_prefix_skip(s: &[u8]) -> usize", | |
| "spec_doc": "Returns how many leading bytes of an RFC3966 phone-context value to skip: 1 if it starts with '+', otherwise 0. Must not panic on empty input.", | |
| "bug_class": "panic", | |
| "fidelity": "verbatim_logic", | |
| "extraction_note": "src/parser/rfc3966.rs: s.as_bytes()[0] on empty phone-context", | |
| "witness_args": "&[]", | |
| "labels": { | |
| "buggy": "phonenumber@0.2.4+8.11.3", | |
| "reference": "phonenumber@0.2.5+8.11.3" | |
| } | |
| } |