Skip to content

RUSTSEC-2024-0357: MemBio::get_buf has undefined behavior with empty buffers #19

Description

@github-actions
Details
Package openssl
Version 0.10.44
URL rust-openssl/rust-openssl#2266
Patched Versions >=0.10.66
Aliases GHSA-q445-7m23-qrmw

Previously, MemBio::get_buf called slice::from_raw_parts with a null-pointer, which violates the functions invariants, leading to undefined behavior. In debug builds this would produce an assertion failure. This is now fixed.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions