Skip to content

Commit 173850b

Browse files
nyw0102Shnatsel
andauthored
Add advisory for segmentation fault in grcov (#2191)
* Add advisory for segmentation fault in grcov * More clear description based on the linked bug and the patch --------- Co-authored-by: Sergey "Shnatsel" Davidoff <shnatsel@gmail.com>
1 parent 08617ac commit 173850b

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

crates/grcov/RUSTSEC-0000-0000.md

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
```toml
2+
[advisory]
3+
id = "RUSTSEC-0000-0000"
4+
package = "grcov"
5+
date = "2025-01-13"
6+
url = "https://bugzilla.mozilla.org/show_bug.cgi?id=1917475"
7+
categories = ["memory-corruption"]
8+
9+
[affected]
10+
functions = { "grcov::covdir::get_coverage" = ["<=0.8.20"] }
11+
12+
[versions]
13+
patched = [">0.8.20"]
14+
```
15+
# Out of bounds write triggered by crafted coverage data
16+
Function `grcov::covdir::get_coverage` uses the `unsafe` function `get_unchecked_mut`
17+
without validating that the index is in bounds.
18+
19+
This results in memory corruption, and could potentially allow arbitrary code execution
20+
provided that an attacker can feed the tool crafted coverage data.

0 commit comments

Comments
 (0)