From 148b3d2dd05e2a4f883e474ac7c8695b989f151a Mon Sep 17 00:00:00 2001 From: Ralf Jung Date: Tue, 16 Jul 2019 15:49:35 +0200 Subject: [PATCH] add memoffset issue --- crates/memoffset/RUSTSEC-0000-0000.toml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 crates/memoffset/RUSTSEC-0000-0000.toml diff --git a/crates/memoffset/RUSTSEC-0000-0000.toml b/crates/memoffset/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..f0ccac9 --- /dev/null +++ b/crates/memoffset/RUSTSEC-0000-0000.toml @@ -0,0 +1,14 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "memoffset" +date = "2019-07-16" +title = "Flaw in offset_of and span_of causes SIGILL, potential memory unsafety" +description = """ +Affected versions of this crate caused traps and/or memory unsafety by zero-initializing references. + +The flaw was corrected by using `MaybeUninit`. +""" + +patched_versions = [">= 0.5.0"] +unaffected_versions = ["< 0.3.0"] +url = "https://github.com/Gilnaa/memoffset/issues/9#issuecomment-505461490"