vhbit/lmdb-rs · Security
impl `FromMdbValue` for bool is unsound
- GHSA ID
- GHSA-f9g6-fp84-fv92
- Severity
- medium
- Published
- Updated
Description
The implementation of FromMdbValue has several unsoundness issues. First of all, it allows to reinterpret arbitrary bytes as a bool and could make undefined behavior happen with safe function. Secondly, it allows transmuting pointer without taking memory layout into consideration. The details of reproducing the bug are available here.