Add advisory for fake-static

This commit is contained in:
Eduardo Sánchez Muñoz
2020-04-24 00:51:46 +02:00
parent aecc04c1f1
commit 6e85444c98

View File

@@ -0,0 +1,17 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "fake-static"
date = "2020-04-24"
title = "fake-static allows converting any reference into a `'static` reference"
description = """
fake-static allows converting a refernce with any lifetime into
a reference with `'static` lifetime without the `unsafe` keyword.
Internally, this crate does not use unsafe code, it instead
exploits a soundness bug in rustc:
https://github.com/rust-lang/rust/issues/25860
"""
[versions]
patched = []