Skip to content
This repository has been archived by the owner on Mar 23, 2021. It is now read-only.

RUSTSEC-2020-0041: Multiple soundness issues in Chunk and InlineArray #3323

Closed
github-actions bot opened this issue Oct 24, 2020 · 4 comments
Closed

Comments

@github-actions
Copy link

Multiple soundness issues in Chunk and InlineArray

Details
Package sized-chunks
Version 0.6.2
URL bodil/sized-chunks#11
Date 2020-09-06

Chunk:

  • Array size is not checked when constructed with unit() and pair().
  • Array size is not checked when constructed with From<InlineArray<A, T>>.
  • Clone and insert_from are not panic-safe; A panicking iterator causes memory safety issues with them.

InlineArray:

  • Generates unaligned references for types with a large alignment requirement.

See advisory page for additional details.

@D4nte
Copy link
Contributor

D4nte commented Oct 24, 2020

Do we even have this dependency?

@thomaseizinger
Copy link
Contributor

Probably a transient one. You can find out with cargo tree!

@D4nte
Copy link
Contributor

D4nte commented Oct 30, 2020

I did check cargo lock before asking, I guess I did not check correctly. It comes from sentry.

@github-actions
Copy link
Author

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants