WS-2020-0250

Date: December 10, 2020

xcb crate through 0.9.0 contains soundness issue with base::Error. base::Error type contains public field named ptr. With this definition, it is possible to create a base::Error with an invalid pointer and trigger memory safety errors such as use-after-free or double-free with safe Rust. The users of xcb crate are advised not to manipulate the field.

Language: RUST