In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside siftup or siftdown_range panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory safety violation.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libstd-rust-1.47", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "libstd-rust-1.47-dbgsym", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "libstd-rust-dev", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "rust-doc", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "rust-gdb", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "rust-lldb", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "rust-src", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "rustc", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" }, { "binary_name": "rustc-dbgsym", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~16.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libstd-rust-1.47", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "libstd-rust-1.47-dbgsym", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "libstd-rust-dev", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "rust-doc", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "rust-gdb", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "rust-lldb", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "rust-src", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "rustc", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" }, { "binary_name": "rustc-dbgsym", "binary_version": "1.47.0+dfsg1+llvm-1ubuntu1~18.04.1" } ] }