Skip to content

Conversation

@lewismosciski
Copy link
Contributor

This PR adds an advisory for soundness issues in remoteprocess.

Summary

Safe methods in the ProcessMemory trait can cause double-free and use-after-free bugs when used with non-Copy types.

Details

  • Vulnerability: Methods perform bitwise copies without enforcing Copy trait
  • Impact: Double-free when copying non-POD types (e.g., String, Vec)
  • Affected functions: copy_struct, copy_pointer, copy_vec
  • Affected versions: < 0.5.1
  • Status: ✅ Confirmed and fixed by maintainer
  • Fix: Added Copy trait bounds to ensure only trivially copyable types can be used
  • Fixed in: 0.5.1

Safe methods in ProcessMemory trait can cause double-free and use-after-free. Fixed in 0.5.1 by adding Copy trait bounds.
@lewismosciski
Copy link
Contributor Author

Hi @benfred,

Could you please confirm you're okay with publishing this advisory for the soundness issue benfred/remoteprocess#105?

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant