RUSTSEC-2024-0007: Unsoundness in rust-i18n-support

Rust Crates.io Security Advisory


History
Edit
JSON (OSV)

RUSTSEC-2024-0007

Use-after-free when setting the locale


Reported
Issued

Package

rust-i18n-support
(crates.io)

Type

INFO
Unsound

Categories
References
Patched
  • >=3.0.1
Unaffected
  • <3.0.0
Affected Functions
Version
rust_i18n_support::AtomicStr::as_str
  • <3.0.1, >=3.0.0

Description

Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale.
It stores the locale as a raw pointer to an Arc.
The locale can be read with AtomicStr::as_str().
AtomicStr::as_str() does not increment the usage counter of the Arc.

If the locale is changed in one thread, another thread can have a stale -- possibly already freed --
reference to the stored string.

Advisory available under CC0-1.0
license.

READ MORE