diff --git a/crates/ordnung/RUSTSEC-0000-0000.toml b/crates/ordnung/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..302e446 --- /dev/null +++ b/crates/ordnung/RUSTSEC-0000-0000.toml @@ -0,0 +1,15 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "ordnung" +date = "2020-09-03" +title = "Memory safety issues in `compact::Vec`" +url = "https://github.com/maciejhirsz/ordnung/issues/8" +description = """ +`compact::Vec` contains multiple memory safety issues. + +1. It mishandles large capacity and causes out-of-bound access in 32-bit / allocator layout mismatch in 64-bit. +2. `remove()` is not panic-safe and causes double-free when an index larger than the length is provided. +""" + +[versions] +patched = []