Skip to content

Commit

Permalink
Add an advisory on lifetime extension in generic-array
Browse files Browse the repository at this point in the history
  • Loading branch information
KamilaBorowska committed Mar 1, 2021
1 parent 6d1fcd9 commit eda0a22
Showing 1 changed file with 19 additions and 0 deletions.
19 changes: 19 additions & 0 deletions crates/generic-array/RUSTSEC-0000-0000.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "generic-array"
date = "2020-04-09"
url = "https://github.com/fizyk20/generic-array/issues/98"
categories = ["memory-corruption"]
keywords = ["soundness"]

[versions]
patched = [">= 0.14.0"]
unaffected = ["< 0.8.0"]
```

# arr! macro erases lifetimes

Affected versions of this crate allowed unsoundly extending
lifetimes using `arr!` macro. This may result in a variety of
memory corruption scenarios, most likely use-after-free.

0 comments on commit eda0a22

Please sign in to comment.