Skip to content

Commit c93737e

Browse files
Update rust/ql/src/queries/security/CWE-502/UnsafeDeserialization.qhelp
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent 795c488 commit c93737e

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

‎rust/ql/src/queries/security/CWE-502/UnsafeDeserialization.qhelp‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,8 @@
55
<overview>
66

77
<p>
8-
Deserializing untrusted data without validation can allow an attacker to cause denial of service, consume excessive resources, or in some cases execute arbitrary code. In Rust, while memory safety mitigates some risks, deserializing untrusted data with libraries like <code>serde</code>, <code>bincode</code>, or <code>rmp-serde</code> can still lead to panics, excessive memory allocation, or logic bugs when trait objects or polymorphic types are involved.
8+
Deserializing untrusted data without validation can allow an attacker to cause denial of service, consume excessive resources, or in some cases execute arbitrary code. Rust's memory safety mitigates some risks, but deserializing untrusted data with libraries like<code>serde</code>, <code>bincode</code>, or <code>rmp-serde</code> can still lead to panics, excessive memory allocation, or logic bugs. This is especially true when trait objects or polymorphic types are involved.
9+
910
</p>
1011

1112
</overview>

0 commit comments

Comments
 (0)