Description
An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference (and memory corruption) can occur because AddRef might not be called before returning a pointer.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | derive-com-impl | < 0.1.2 | 0.1.2 | GHSA-9rg7-3j4f-cf4x |
| crates.io | derive-com-impl | all versions | — | GHSA-w4cc-pc2h-whcj |
| crates.io | derive-com-impl | >= 0.0.0-0, < 0.1.2 | 0.1.2 | RUSTSEC-2021-0083 |