MEDIUM5.3
GHSA-68p4-pjpf-xwcq
insert_slice_clone can double drop if Clone panics.
Details
Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element.
This issue can result in an element being double-freed if the clone call panics.
Commit `20cb73d` fixed this issue by adding a set_len(0) call before operating on the vector to avoid dropping the elements during a panic.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/qwutils
Introduced in:
0Fixed in: 0.3.1Upgrade qwutils to 0.3.1 or newer (ecosystem crates.io).