medium5.3
CVE-2021-26954
insert_slice_clone can double drop if Clone panics.
Impact
Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit `20cb73d` fixed this issue by adding a set_len(0) call before operating on the vector to avoid dropping the elements during a panic.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | qwutils | < 0.3.1 | 0.3.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qwutils Project | Qwutils | before 0.3.1 |