Skip to content

Commit

Permalink
Assigned RUSTSEC-2024-0424 to libafl, RUSTSEC-2024-0425 to get-size, …
Browse files Browse the repository at this point in the history
…RUSTSEC-2024-0426 to spl-token-swap, RUSTSEC-2024-0427 to get-size-derive, RUSTSEC-2024-0428 to kvm-ioctls (#2175)

Co-authored-by: Shnatsel <[email protected]>
  • Loading branch information
github-actions[bot] and Shnatsel authored Dec 22, 2024
1 parent 6efd56a commit 8737f2a
Show file tree
Hide file tree
Showing 6 changed files with 7 additions and 7 deletions.
2 changes: 1 addition & 1 deletion .duplicate-id-guard
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
This file causes merge conflicts if two ID assignment jobs run concurrently.
This prevents duplicate ID assignment due to a race between those jobs.
750771d772c1008f195bddfb04558f4978cbb10636c99c8554510cd83d2c8a17 -
3f34d92fa031f4d1ba6e26266cebb6ac680e1383b6a8b4b335cea124775916bc -
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2024-0427"
package = "get-size-derive"
date = "2024-09-15"
informational = "unmaintained"
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2024-0425"
package = "get-size"
date = "2024-09-15"
informational = "unmaintained"
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2024-0428"
package = "kvm-ioctls"
url = "https://github.com/rust-vmm/kvm/pull/298"
date = "2024-12-05"
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2024-0424"
package = "libafl"
date = "2024-12-19"
url = "https://github.com/AFLplusplus/LibAFL/issues/1526"
Expand All @@ -20,4 +20,4 @@ functions = {"libafl::observers::map::HitcountsMapObserver::post_exec" = ["< 0.1

The library breaks the safety assumptions when using unsafe API `slice::from_raw_parts_mut`. The pointer passed to `from_raw_parts_mut` is misaligned by casting `u8` to `u16` raw pointer directly, which is unsound. The bug is patched by using `align_offset`, which could make sure the memory address is aligned to 2 bytes for `u16`.

This was patched in 0.11.2 in the [commit](https://github.com/AFLplusplus/LibAFL/pull/1530/commits/5a60cb31ef587d71d09d534bba39bd3973c4b35d).
This was patched in 0.11.2 in the [commit](https://github.com/AFLplusplus/LibAFL/pull/1530/commits/5a60cb31ef587d71d09d534bba39bd3973c4b35d).
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2024-0426"
package = "spl-token-swap"
date = "2024-12-19"
url = "https://github.com/solana-labs/solana-program-library/issues/5243"
Expand Down

0 comments on commit 8737f2a

Please sign in to comment.