WS-2020-0156

Date: August 31, 2020

Misbehaving "HandleLike" implementation in crayon through 0.7.1 can lead to memory safety violation. Unsafe code in ObjectPool has time-of-check to time-of-use (TOCTOU) bug that can eventually lead to a memory safety violation. ObjectPool and HandlePool implicitly assumes that HandleLike trait methods are pure, i.e., they always return the same value. However, this assumption is unsound since HandleLike is a safe, public trait that allows a custom implementation.

Language: RUST