Skip to content
OpenAdvisories

Package · crates.io

rustix

2 known vulnerabilities.

2 results · Feed

  • Unscored —

    xattr functions mark unwritten bytes as initialized when given a zero-length buffer

    The extended-attribute functions in `rustix::fs` (`getxattr`, `lgetxattr`, `fgetxattr`, `listxattr`, `llistxattr` and `flistxattr`) write into a `Buffer` and then mark as many bytes initialized as the system call reported. When the buffer has zero length, the…

  • Medium 6.5

    `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion

    Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in `rustix::fs::Di…