Enum Category

#[non_exhaustive]
pub enum Category {
    CodeExecution,
    CryptoFailure,
    DenialOfService,
    FileDisclosure,
    FormatInjection,
    MemoryCorruption,
    MemoryExposure,
    PrivilegeEscalation,
    ThreadSafety,
    Other(String),
}

RustSec Vulnerability Categories

The RustSec project maintains its own categorization system for vulnerabilities according to our criteria for acceptable advisories.

This type represents the present list of allowable vulnerability types for which we allow advisories to be filed.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

CodeExecution

Execution of arbitrary code allowing an attacker to gain partial or total control of an impacted computer system.

CryptoFailure

Cryptography Failure (e.g. confidentiality breakage, integrity breakage, key leakage)

DenialOfService

Vulnerabilities an attacker can leverage to cause crashes or excess resource consumption such that software ceases to function normally, notably panics in code that is advertised as “panic-free” (particularly in format parsers for untrusted data)

FileDisclosure

Disclosure of local files (a.k.a. “directory traversal”)

FormatInjection

Mishandled escaping allowing an attacker to execute code or perform otherwise unexpected operations, e.g. shell escaping, SQL injection, XSS.

MemoryCorruption

Memory unsafety vulnerabilities allowing an attacker to write to unintended locations in memory.

MemoryExposure

Read-only memory safety vulnerabilities which unintentionally expose data.

PrivilegeEscalation

Attacks which bypass authentication and/or authorization systems, allowing the attacker to obtain unintended privileges.

ThreadSafety

Thread safety bug, e.g. data races arising from unsafe code that misapplies and/or misuses Send/Sync.

Other(String)

Other types of categories: left open-ended to add more of them in the future.

Implementations

impl Category

pub fn name(&self) -> &str

Get the short “kebab case” identifier for a category

Trait Implementations

impl Clone for Category

fn clone(&self) -> Category

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Category

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Category

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Display for Category

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromStr for Category

type Err = Error

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Error>

Parses a string s to return a value of this type.

impl Hash for Category

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Category

fn cmp(&self, other: &Category) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Category

fn eq(&self, other: &Category) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for Category

fn partial_cmp(&self, other: &Category) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Category

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl Eq for Category

impl StructuralPartialEq for Category