Skip to content

Commit 256a207

Browse files
authored
Out of bounds read in redux_uefi_std (#2263)
1 parent 10cda9b commit 256a207

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed
Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
```toml
2+
[advisory]
3+
id = "RUSTSEC-0000-0000"
4+
package = "redox_uefi_std"
5+
date = "2025-03-27"
6+
informational = "unsound"
7+
categories = ["memory-corruption"]
8+
keywords = ["out-of-bounds read"]
9+
url = "https://gitlab.redox-os.org/redox-os/uefi/-/commit/b711d47e815665b0ec8949e39292ad8e3fdd0756"
10+
11+
[affected.functions]
12+
"redox_uefi_std::ffi::nstr" = [">= 0.1.8, < 0.1.14"]
13+
14+
[versions]
15+
patched = [">= 0.1.14"]
16+
unaffected = ["< 0.1.8"]
17+
18+
```
19+
20+
# Safe API can cause heap-buffer-overflow
21+
ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.

0 commit comments

Comments
 (0)