From 01c59cafdbf73c945b829f2cb3225da35826c0b9 Mon Sep 17 00:00:00 2001 From: Ben Kimock Date: Sat, 21 Aug 2021 21:07:03 -0400 Subject: [PATCH] Report vec-const as unsound (#981) Co-authored-by: Tony Arcieri --- crates/vec-const/RUSTSEC-0000-0000.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 crates/vec-const/RUSTSEC-0000-0000.md diff --git a/crates/vec-const/RUSTSEC-0000-0000.md b/crates/vec-const/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..f5d409f --- /dev/null +++ b/crates/vec-const/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "vec-const" +date = "2021-08-14" +url = "https://github.com/Eolu/vec-const/issues/1#issuecomment-898908241" +categories = ["memory-corruption"] +keywords = ["memory-safety"] +informational = "unsound" + +[versions] +patched = [] +``` + +# vec-const attempts to construct a Vec from a pointer to a const slice + +This crate claims to construct a const `Vec` with nonzero length and capacity, but that cannot be done because such a `Vec` requires a pointer from an allocator.