Repository navigation
RUSTSEC-2026-0399: Use-after-free through init_using_cdict and init_using_ddict #62
Description
Use-after-free through
init_using_cdictandinit_using_ddict
| Details | |
|---|---|
| Status | unsound |
| Package | zstd-safe |
| Version | 7.2.4 |
| URL | gyscos/zstd-rs@e00e792 |
| Date | 2026-10-16 |
CCtx::init_using_cdict and DCtx::init_using_ddict (experimental
feature, deprecated) took the dictionary as &CDict<'b> and &DDict<'b>
with only 'b: 'a, so the dictionary itself could be dropped while the
context still pointed at it. The same mistake in other constructors was
fixed earlier (<gyscos/zstd-rs#365>).
The flaw was corrected by taking &'a CDict<'b> and &'a DDict<'b>.
See advisory page for additional details.
Activity