scanner-rs OOB read

[charlesxsh]

No description provided.

[djc]

It's not obvious how this crate is implicated. Have you filed an issue against it? Does the maintainer agree that there is an issue that warrants an advisory? Has a fix been released?

[charlesxsh]

It's not obvious how this crate is implicated. Have you filed an issue against it? Does the maintainer agree that there is an issue that warrants an advisory? Has a fix been released?

Actually I would like to create issue over there at first. However, that git repository does not allow me to create an issue.

[charlesxsh]

The code snippet is copied from the crate's lib.rs

https://github.com/pombredanne/scanner-rs/blob/2893e45f8d60692a11e8584ba01eb38fe7798fea/src/lib.rs#L398C1-L420C2

[tarcieri]

You can create a new issue here: https://github.com/pombredanne/scanner-rs/issues/new

Edit: weird, 404 on desktop, works on mobile but I can't actually post an issue

Looks like you might be able to open a PR?

[djc]

Submitting a PR (maybe adding an unmaintained notice to the README) seems like a decent way to notify the author. The repo has just 1 commit from 9 years ago so I wouldn't expect a lot of activity, but at least the author still seems quite active on GitHub.

[charlesxsh]

Submitting a PR (maybe adding an unmaintained notice to the README) seems like a decent way to notify the author. The repo has just 1 commit from 9 years ago so I wouldn't expect a lot of activity, but at least the author still seems quite active on GitHub.

I created a PR pombredanne/scanner-rs#1