https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 02:44:24 +0000 https://cve.radiocsirt.org/vuln/cve-2021-29941 <p>An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index has an out-of-bounds write if an iterator returns a len() that is too small.</p> <p>An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index has an out-of-bounds write if an iterator returns a len() that is too small.</p> https://cve.radiocsirt.org/vuln/cve-2021-29941 https://cve.radiocsirt.org/vuln/rustsec-2021-0050 <p><strong>Affected:</strong> crates.io: reorder</p> <p>`swap_index` takes an iterator and swaps the items with their corresponding indexes. It reserves capacity and sets the length of the vector based on the `.len()` method of the iterator.</p> <p>If the `len()` returned by the iterator is larger than the actual number of elements yielded, then `swap_index` creates a vector containing uninitialized members. If the `len()` returned by the iterator is smaller than the actual number of members yielded, then `swap_index` can write out of bounds past its allocated vector.</p> <p>As noted by the Rust documentation, [`len()`](https://doc.rust-lang.org/std/iter/trait.ExactSizeIterator.html#method.len) and `size_hint()` are primarily meant for optimization and incorrect values from their implementations should not lead to memory safety violations.</p> <p># Patch</p> <p>A new version crate was pushed that marks this function as unsafe.</p> <p>reorder = &#34;1.1.0&#34;</p> <p>Previous versions have also been yanked from crates.io.</p> <p><strong>Affected:</strong> crates.io: reorder</p> <p>`swap_index` takes an iterator and swaps the items with their corresponding indexes. It reserves capacity and sets the length of the vector based on the `.len()` method of the iterator.</p> <p>If the `len()` returned by the iterator is larger than the actual number of elements yielded, then `swap_index` creates a vector containing uninitialized members. If the `len()` returned by the iterator is smaller than the actual number of members yielded, then `swap_index` can write out of bounds past its allocated vector.</p> <p>As noted by the Rust documentation, [`len()`](https://doc.rust-lang.org/std/iter/trait.ExactSizeIterator.html#method.len) and `size_hint()` are primarily meant for optimization and incorrect values from their implementations should not lead to memory safety violations.</p> <p># Patch</p> <p>A new version crate was pushed that marks this function as unsafe.</p> <p>reorder = &#34;1.1.0&#34;</p> <p>Previous versions have also been yanked from crates.io.</p> https://cve.radiocsirt.org/vuln/rustsec-2021-0050