Use-after-free with objects returned by `Stream`'s `get_form… (CVE-2018-25027)

Summary

Use-after-free with objects returned by Stream's get_format_info and get_context methods

Original description

The description as published by the source.

Affected versions contained a pair of use-after-free issues with the objects returned by the get_format_info and get_context methods of Stream objects. These objects were mistakenly being constructed without setting an important flag to prevent destruction of the underlying C objects they reference upon their own destruction.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

crates.io libpulse-binding

[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"1.2.1"}]}]

References

advisory rustsec.org
package crates.io
web github.com