From d55e3a08ddf961d29a995ef99a768ff9e32e4855 Mon Sep 17 00:00:00 2001 From: MJUCOM Date: Tue, 4 Aug 2026 16:26:46 +0900 Subject: [PATCH] Add advisory for infisearch_common --- crates/infisearch_common/RUSTSEC-0000-0000.md | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 crates/infisearch_common/RUSTSEC-0000-0000.md diff --git a/crates/infisearch_common/RUSTSEC-0000-0000.md b/crates/infisearch_common/RUSTSEC-0000-0000.md new file mode 100644 index 0000000000..c925c96ce7 --- /dev/null +++ b/crates/infisearch_common/RUSTSEC-0000-0000.md @@ -0,0 +1,31 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "infisearch_common" +date = "2024-10-13" +url = "https://github.com/ang-zeyu/infisearch/issues/11" +informational = "unsound" +categories = ["memory-corruption"] +keywords = ["out-of-bounds", "global-buffer-overflow", "soundness", "unsafe"] + +[affected.functions] +"infisearch_common::packed_var_int::PackedVarIntReader::read_type" = ["<= 0.10.1"] + +[versions] +patched = [] +``` + +# `PackedVarIntReader::read_type` can access memory out of bounds + +Affected versions of `infisearch_common` contain a safe method, +`PackedVarIntReader::read_type`, which can perform out-of-bounds accesses. + +The method accepts a type index `t` and uses it to access several internal +arrays through unchecked indexing. If `t` is outside the expected range, the +method can read or write out of bounds. + +Because the method is safe, callers do not need to use `unsafe` to trigger the +invalid memory access. The issue was reported with AddressSanitizer as a +global-buffer-overflow. + +No patched release is currently known.