Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1mN3FqLXYzdnAtNDg1Ns4ABCrV

libafl has unsound usages of `core::slice::from_raw_parts_mut`

The library breaks the safety assumptions when using unsafe API slice::from_raw_parts_mut. The pointer passed to from_raw_parts_mut is misaligned by casting u8 to u16 raw pointer directly, which is unsound. The bug is patched by using align_offset, which could make sure the memory address is aligned to 2 bytes for u16.

This was patched in 0.11.2 in the commit.

Permalink: https://github.com/advisories/GHSA-f7qj-v3vp-4856
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mN3FqLXYzdnAtNDg1Ns4ABCrV
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 6 days ago
Updated: 6 days ago

Identifiers: GHSA-f7qj-v3vp-4856
References:

• https://github.com/AFLplusplus/LibAFL/issues/1526
• https://github.com/AFLplusplus/LibAFL/pull/1530
• https://github.com/AFLplusplus/LibAFL/pull/1530/commits/5a60cb31ef587d71d09d534bba39bd3973c4b35d
• https://github.com/AFLplusplus/LibAFL/commit/f70a16a09a8096d3c50159dd8a912a75c2af157c
• https://rustsec.org/advisories/RUSTSEC-2024-0424.html
• https://github.com/advisories/GHSA-f7qj-v3vp-4856

Repository: https://github.com/AFLplusplus/LibAFL
Blast Radius: 0.0

Affected Packages