We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 10cda9b commit 256a207Copy full SHA for 256a207
crates/redox_uefi_std/RUSTSEC-0000-0000.md
@@ -0,0 +1,21 @@
1
+```toml
2
+[advisory]
3
+id = "RUSTSEC-0000-0000"
4
+package = "redox_uefi_std"
5
+date = "2025-03-27"
6
+informational = "unsound"
7
+categories = ["memory-corruption"]
8
+keywords = ["out-of-bounds read"]
9
+url = "https://gitlab.redox-os.org/redox-os/uefi/-/commit/b711d47e815665b0ec8949e39292ad8e3fdd0756"
10
+
11
+[affected.functions]
12
+"redox_uefi_std::ffi::nstr" = [">= 0.1.8, < 0.1.14"]
13
14
+[versions]
15
+patched = [">= 0.1.14"]
16
+unaffected = ["< 0.1.8"]
17
18
+```
19
20
+# Safe API can cause heap-buffer-overflow
21
+ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.
0 commit comments