Исходное сообщение
"В кодовой базе Chromium разрешено использование языка Rust" Отправлено Аноним, 14-Янв-23 02:48
CVE-2020-36318: In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free. CVE-2021-31162: In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics. CVE-2021-28879: In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again. Double free, use-after-free и переполнение буфера — полный набор, и всё в стандартной библиотеке. :)