Merge pull request #270 from eduardosm/fake-static

Add advisory for fake-static
This commit is contained in:
Tony Arcieri
2020-04-24 12:36:49 -07:00
committed by GitHub

View File

@@ -0,0 +1,17 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "fake-static"
date = "2020-04-24"
title = "fake-static allows converting any reference into a `'static` reference"
description = """
fake-static allows converting a refernce with any lifetime into
a reference with `'static` lifetime without the `unsafe` keyword.
Internally, this crate does not use unsafe code, it instead
exploits a soundness bug in rustc:
https://github.com/rust-lang/rust/issues/25860
"""
[versions]
patched = []