New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add advisory for Stack-buffer-overflow in xmas-elf #2235

Open

nyw0102 wants to merge 2 commits into rustsec:main from nyw0102:main

Contributor

nyw0102 commented Mar 3, 2025

No description provided.


          Create RUSTSEC-0000-0000.md

59207d0

Member

alex commented Mar 3, 2025

However, it is still vulnerable because "bucket_count" which stands for the size of hashtable and offset value of the hashtable can be manipulated by users

This doesn't look true? https://github.com/nrc/xmas-elf/blob/master/src/hash.rs#L6-L10 none of these fields are pub.

Is there some other way that users can control the values of these fields?


          Merge branch 'rustsec:main' into main

0c68acb

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet