Search results

Vetting 3rd party crates for supply-chain-security issues

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-enhancementCategory: An issue proposing an enhancement or a PR with one.Category: An issue proposing an enhancement or a PR with one.

T-bootstrapRelevant to the bootstrap subteam: Rust's build system (x.py and src/bootstrap)Relevant to the bootstrap subteam: Rust's build system (x.py and src/bootstrap)

T-infraRelevant to the infrastructure team, which will review and decide on the PR/issue.Relevant to the infrastructure team, which will review and decide on the PR/issue.

Status: Open.

#128047 In rust-lang/rust;

· kornelski opened on Jul 22, 2024

Dynamic linking suppresses stackeroverflow detection

A-linkageArea: linking into static, shared libraries and binariesArea: linking into static, shared libraries and binaries

A-runtimeArea: std's runtime and "pre-main" init for handling backtraces, unwinds, stack overflowsArea: std's runtime and "pre-main" init for handling backtraces, unwinds, stack overflows

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-bugCategory: This is a bug.Category: This is a bug.

T-libsRelevant to the library team, which will review and decide on the PR/issue.Relevant to the library team, which will review and decide on the PR/issue.

Status: Open.

#110810 In rust-lang/rust;

· Eliah-Lakhin opened on Apr 25, 2023

Consider disabling LVI mitigations in the x86_64-fortanix-unknown-sgx target

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

A-target-featureArea: Enabling/disabling target features like AVX, Neon, etc.Area: Enabling/disabling target features like AVX, Neon, etc.

A-target-specsArea: Compile-target specificationsArea: Compile-target specifications

O-SGXTarget: SGXTarget: SGX

O-x86_64Target: x86-64 processors (like x86_64-*) (also known as amd64 and x64)Target: x86-64 processors (like x86_64-*) (also known as amd64 and x64)

T-compilerRelevant to the compiler team, which will review and decide on the PR/issue.Relevant to the compiler team, which will review and decide on the PR/issue.

Status: Open.

#108414 In rust-lang/rust;

· clauverjat opened on Feb 23, 2023

<code>std::env</code> uses <code>getenv</code> instead of <code>secure_getenv</code>

A-processArea: `std::process` and `std::env`Area: `std::process` and `std::env`

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-bugCategory: This is a bug.Category: This is a bug.

T-libsRelevant to the library team, which will review and decide on the PR/issue.Relevant to the library team, which will review and decide on the PR/issue.

Status: Open.

#92558 In rust-lang/rust;

· briansmith opened on Jan 4, 2022

<code>-Ccontrol-flow-guard</code> should raise an error on unsupported platforms

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-bugCategory: This is a bug.Category: This is a bug.

T-compilerRelevant to the compiler team, which will review and decide on the PR/issue.Relevant to the compiler team, which will review and decide on the PR/issue.

Status: Open.

#91060 In rust-lang/rust;

· nagisa opened on Nov 19, 2021

Method resolution can be influenced in unexpected ways by external crates.

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

A-trait-systemArea: Trait systemArea: Trait system

C-bugCategory: This is a bug.Category: This is a bug.

T-compilerRelevant to the compiler team, which will review and decide on the PR/issue.Relevant to the compiler team, which will review and decide on the PR/issue.

T-langRelevant to the language teamRelevant to the language team

Status: Open.

#90907 In rust-lang/rust;

· steffahn opened on Nov 14, 2021

Insecure behavior in std::process::Command on Windows

A-processArea: `std::process` and `std::env`Area: `std::process` and `std::env`

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-bugCategory: This is a bug.Category: This is a bug.

O-windowsOperating system: WindowsOperating system: Windows

P-highHigh priorityHigh priority

T-libsRelevant to the library team, which will review and decide on the PR/issue.Relevant to the library team, which will review and decide on the PR/issue.

Status: Open.

#87945 In rust-lang/rust;

· bk2204 opened on Aug 11, 2021

Exploit mitigations applied by default are not documented

A-docsArea: Documentation for any part of the project, including the compiler, standard library, and toolsArea: Documentation for any part of the project, including the compiler, standard library, and tools

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-enhancementCategory: An issue proposing an enhancement or a PR with one.Category: An issue proposing an enhancement or a PR with one.

PG-exploit-mitigationsProject group: Exploit mitigationsProject group: Exploit mitigations

T-compilerRelevant to the compiler team, which will review and decide on the PR/issue.Relevant to the compiler team, which will review and decide on the PR/issue.

Status: Open.

#71098 In rust-lang/rust;

· Shnatsel opened on Apr 13, 2020

Restrict Windows DLL search path as a precaution against DLL pre-loading attacks

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-enhancementCategory: An issue proposing an enhancement or a PR with one.Category: An issue proposing an enhancement or a PR with one.

O-windowsOperating system: WindowsOperating system: Windows

Status: Open.

#56056 In rust-lang/rust;

· cpeterso opened on Nov 19, 2018

Enable strict HANDLE checking for all Windows Rust programs

A-runtimeArea: std's runtime and "pre-main" init for handling backtraces, unwinds, stack overflowsArea: std's runtime and "pre-main" init for handling backtraces, unwinds, stack overflows

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-enhancementCategory: An issue proposing an enhancement or a PR with one.Category: An issue proposing an enhancement or a PR with one.

O-windowsOperating system: WindowsOperating system: Windows

T-libs-apiRelevant to the library API team, which will review and decide on the PR/issue.Relevant to the library API team, which will review and decide on the PR/issue.

Status: Open.

#56055 In rust-lang/rust;

· cpeterso opened on Nov 19, 2018

MinGW's linker does not create a reloc section for DYNAMICBASE executables

A-linkageArea: linking into static, shared libraries and binariesArea: linking into static, shared libraries and binaries

A-securityArea: Security (example: address space layout randomization).Area: Security (example: address space layout randomization).

C-bugCategory: This is a bug.Category: This is a bug.

O-windows-gnuToolchain: GNU, Operating system: WindowsToolchain: GNU, Operating system: Windows

Status: Open.

#16581 In rust-lang/rust;

· thestinger opened on Aug 18, 2014