mirror of https://github.com/rwf2/Rocket.git
b8f9011c04
The existing implementation of 'LocalRequest::clone()' mistakenly copied the internal 'Request' pointer from the existing 'LocalRequest' to the cloned 'LocalRequest'. This resulted in an aliased '*mut Request' pointer, a clear soundness issue. The fix in this commit is to clone the internal 'Request', replacing the internal pointer with the newly cloned 'Request' when producing the cloned 'LocalRequest'. A fix that removes all 'unsafe' code should be explored. Fixes #1312. |
||
|---|---|---|
| .. | ||
| absolute-uris-okay-issue-443.rs | ||
| catcher-cookies-1213.rs | ||
| conditionally-set-server-header-996.rs | ||
| derive-reexports.rs | ||
| fairing_before_head_strip-issue-546.rs | ||
| flash-lazy-removes-issue-466.rs | ||
| form_method-issue-45.rs | ||
| form_value_decoding-issue-82.rs | ||
| guide.rs | ||
| head_handling.rs | ||
| limits.rs | ||
| local-request-content-type-issue-505.rs | ||
| local_request_private_cookie-issue-368.rs | ||
| mount_point.rs | ||
| nested-fairing-attaches.rs | ||
| precise-content-type-matching.rs | ||
| redirect_from_catcher-issue-113.rs | ||
| responder_lifetime-issue-345.rs | ||
| route_guard.rs | ||
| segments-issues-41-86.rs | ||
| strict_and_lenient_forms.rs | ||
| unsound-local-request-1312.rs | ||
| uri-percent-encoding-issue-808.rs | ||