From aa8d1041ce4a72f07f0b490159085b3be3dc1d70 Mon Sep 17 00:00:00 2001 From: Ralf Jung Date: Fri, 24 Jul 2020 09:34:48 +0200 Subject: [PATCH] add smallvec unsoundness --- crates/smallvec/RUSTSEC-0000-0000.toml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 crates/smallvec/RUSTSEC-0000-0000.toml diff --git a/crates/smallvec/RUSTSEC-0000-0000.toml b/crates/smallvec/RUSTSEC-0000-0000.toml new file mode 100644 index 000000000..e9520b9f5 --- /dev/null +++ b/crates/smallvec/RUSTSEC-0000-0000.toml @@ -0,0 +1,18 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "smallvec" +date = "2018-09-25" +informational = "unsound" + +title = "smallvec creates uninitialized value of any type" +url = "https://github.com/servo/rust-smallvec/issues/126" + +description = """ +Affected versions of this crate called `mem::uninitialized()` to create values of a user-supplied type `T`. +This is unsound e.g. if `T` is a reference type (which must be non-null and thus may not remain uninitialized). + +The flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead. +""" + +[versions] +patched = [">= 0.6.13"]