{ "item_id": "ker-phone_ctx", "kernel": "phone_ctx", "advisory": "RUSTSEC-2023-0082", "crate": "phonenumber", "pre_version": "0.2.4+8.11.3", "post_version": "0.2.5+8.11.3", "advisory_url": "https://github.com/whisperfish/rust-phonenumber/commit/2dd44be94539c051b4dee55d1d9d349bd7bedde6", "title": "phonenumber: panic on parsing crafted RF3966 phonenumber inputs ", "source_file": "src/parser/rfc3966.rs", "function": "context_prefix_skip", "signature": "pub fn context_prefix_skip(s: &[u8]) -> usize", "spec_doc": "Returns how many leading bytes of an RFC3966 phone-context value to skip: 1 if it starts with '+', otherwise 0. Must not panic on empty input.", "bug_class": "panic", "fidelity": "verbatim_logic", "extraction_note": "src/parser/rfc3966.rs: s.as_bytes()[0] on empty phone-context", "witness_args": "&[]", "labels": { "buggy": "phonenumber@0.2.4+8.11.3", "reference": "phonenumber@0.2.5+8.11.3" } }