---
id: 5687
title: "Rust, realloc, and references"
source_domain: osec.io
source_url: "https://osec.io/blog/rust-realloc-and-references/"
published_at: "2022-12-09T00:00:00Z"
tags: ["memory-safety", "rust", "audit", "solana", "sdk", "realloc"]
phying_url: "https://phying.com/item/5687"
lang: en
---

# Rust, realloc, and references

## Summary

OtterSec traces a subtle Solana SDK bug in AccountInfo::realloc — unchecked pointer math behind unsafe — explaining BPF loader ABI internals and how the audit uncovered it.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2022-12-09T00:00:00Z
- **Original:** https://osec.io/blog/rust-realloc-and-references/
- **Phying News:** https://phying.com/item/5687