GHSA-cqpr-pcm7-m3jc

Source

https://github.com/advisories/GHSA-cqpr-pcm7-m3jc

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-cqpr-pcm7-m3jc/GHSA-cqpr-pcm7-m3jc.json

Withdrawn

2022-07-21T18:06:06Z

Published

2022-06-16T23:48:34Z

Modified

2022-08-04T19:38:53Z

Details

Impact

Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.

Workarounds

No workarounds are known.

References

• https://github.com/chronotope/chrono/issues/499
• https://github.com/time-rs/time/issues/293
• https://github.com/chronotope/chrono
• https://rustsec.org/advisories/RUSTSEC-2020-0159.html