Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1wNmdqLWdwYzgtZjh4d84AArst

Aliased mutable references from `tls_rand` & `TlsWyRand`

TlsWyRand's implementation of Deref unconditionally dereferences a raw pointer, and returns
multiple mutable references to the same object, which is undefined behavior.

Permalink: https://github.com/advisories/GHSA-p6gj-gpc8-f8xw
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wNmdqLWdwYzgtZjh4d84AArst
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: 11 months ago

Identifiers: GHSA-p6gj-gpc8-f8xw
References:

• https://github.com/Absolucy/nanorand-rs/issues/28
• https://rustsec.org/advisories/RUSTSEC-2021-0114.html
• https://github.com/advisories/GHSA-p6gj-gpc8-f8xw

Repository: https://github.com/Absolucy/nanorand-rs
Blast Radius: 0.0

Affected Packages