Report vec-const as unsound (#981)

Co-authored-by: Tony Arcieri <bascule@gmail.com>
This commit is contained in:
Ben Kimock
2021-08-21 21:07:03 -04:00
committed by GitHub
parent f20b53ca89
commit 01c59cafdb

View File

@@ -0,0 +1,17 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "vec-const"
date = "2021-08-14"
url = "https://github.com/Eolu/vec-const/issues/1#issuecomment-898908241"
categories = ["memory-corruption"]
keywords = ["memory-safety"]
informational = "unsound"
[versions]
patched = []
```
# vec-const attempts to construct a Vec from a pointer to a const slice
This crate claims to construct a const `Vec` with nonzero length and capacity, but that cannot be done because such a `Vec` requires a pointer from an allocator.