GHSA-68p4-pjpf-xwcqMediumCVSS 5.3

insert_slice_clone can double drop if Clone panics.

Published
May 24, 2022
Last Modified
June 13, 2023

🔗 CVE IDs covered (1)

📋 Description

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element.

This issue can result in an element being double-freed if the clone call panics.

Commit 20cb73d fixed this issue by adding a set_len(0) call before operating on the vector to avoid dropping the elements during a panic.

🎯 Affected products1

  • rust/qwutils:< 0.3.1

🔗 References (5)