From d8e872fd93d88d50a4e16fa90eda327665809e03 Mon Sep 17 00:00:00 2001 From: Tony Arcieri Date: Mon, 27 Jan 2020 07:19:15 -0800 Subject: [PATCH] Assign RUSTSEC-2020-0004 to lucet-runtime-internals Original PR: https://github.com/RustSec/advisory-db/pull/229 --- .../{RUSTSEC-0000-0000.toml => RUSTSEC-2020-0004.toml} | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) rename crates/lucet-runtime-internals/{RUSTSEC-0000-0000.toml => RUSTSEC-2020-0004.toml} (95%) diff --git a/crates/lucet-runtime-internals/RUSTSEC-0000-0000.toml b/crates/lucet-runtime-internals/RUSTSEC-2020-0004.toml similarity index 95% rename from crates/lucet-runtime-internals/RUSTSEC-0000-0000.toml rename to crates/lucet-runtime-internals/RUSTSEC-2020-0004.toml index f343010e0..d884c91ab 100644 --- a/crates/lucet-runtime-internals/RUSTSEC-0000-0000.toml +++ b/crates/lucet-runtime-internals/RUSTSEC-2020-0004.toml @@ -1,12 +1,8 @@ [advisory] -id = "RUSTSEC-0000-0000" - +id = "RUSTSEC-2020-0004" package = "lucet-runtime-internals" - date = "2020-01-24" - title = "sigstack allocation bug can cause memory corruption or leak" - description = """ An embedding using affected versions of lucet-runtime configured to use non-default Wasm globals sizes of more than 4KiB, or compiled in debug mode @@ -16,9 +12,6 @@ guest programs or cause corruption of guest program memory. This flaw was resolved by correcting the sigstack allocation logic. """ - patched_versions = ["< 0.5.0, >= 0.4.3", ">= 0.5.1"] - url = "https://github.com/bytecodealliance/lucet/pull/401" - categories = ["memory-corruption", "memory-exposure"]