1 result · Feed
-
Unscored —
`VMABuffer::set_data` may allow out-of-bounds writes from safe code
`VMABuffer::set_data` was a publicly accessible safe function. It accepted an arbitrary `offset` and a data slice, then used the offset in unsafe pointer arithmetic before copying the slice into a mapped allocation. Affected versions did not check that the re…