Use of Uninitialized Resource in alg_ds
Critical severity
GitHub Reviewed
Published
Aug 25, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Aug 8, 2021
Reviewed
Aug 9, 2021
Published to the GitHub Advisory Database
Aug 25, 2021
Last updated
Feb 1, 2023
An issue was discovered in the alg_ds crate through 2020-08-25 for Rust.
Matrix::new()
internally callsMatrix::fill_with()
which uses*ptr = value
pattern to initialize the buffer. This pattern assumes that there is an initialized struct at the address and drops it, which results in dropping of uninitialized struct.References