Skip to content

Commit 6b7b129

Browse files
authored
add hyper advisory (#1232)
1 parent e78650d commit 6b7b129

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

crates/hyper/RUSTSEC-0000-0000.md

+18
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
```toml
2+
[advisory]
3+
id = "RUSTSEC-0000-0000"
4+
package = "hyper"
5+
date = "2022-05-10"
6+
informational = "unsound"
7+
url = "https://github.com/hyperium/hyper/pull/2545"
8+
9+
[versions]
10+
patched = [">= 0.4.12"]
11+
```
12+
13+
# Parser creates invalid uninitialized value
14+
15+
Affected versions of this crate called `mem::uninitialized()` in the HTTP1 parser to create values of type `httparse::Header` (from the `httparse` crate).
16+
This is unsound, since `Header` contains references and thus must be non-null.
17+
18+
The flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead.

0 commit comments

Comments
 (0)