| { | |
| "item_id": "ker-bcrypt_split", | |
| "kernel": "bcrypt_split", | |
| "advisory": "RUSTSEC-2026-0199", | |
| "crate": "bcrypt", | |
| "pre_version": "0.19.1", | |
| "post_version": "0.19.2", | |
| "advisory_url": "https://github.com/Keats/rust-bcrypt/pull/103", | |
| "title": "Panic in `bcrypt::verify` on non-ASCII hash input", | |
| "source_file": "src/lib.rs", | |
| "function": "split_hash_salt_len", | |
| "signature": "pub fn split_hash_salt_len(hash: &[u8]) -> Result<usize, u8>", | |
| "spec_doc": "Validates a bcrypt hash string and returns the salt length (22). A valid hash is exactly 60 ASCII bytes; every other input must give Err, never panic.", | |
| "bug_class": "panic", | |
| "fidelity": "model_of_std", | |
| "extraction_note": "src/lib.rs split_hash: &str slicing at a non-char-boundary on non-ASCII 60-byte input", | |
| "witness_args": "&[b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', 0xA3, b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a', b'a']", | |
| "labels": { | |
| "buggy": "bcrypt@0.19.1", | |
| "reference": "bcrypt@0.19.2" | |
| } | |
| } |