From b6bcce2c6bbfb5c4f73b5a305fdce19898bed761 Mon Sep 17 00:00:00 2001 From: Egor Larionov Date: Tue, 13 Oct 2020 04:41:52 -0700 Subject: [PATCH] Add patch version for the unsoundness issue in dync (#427) --- crates/dync/RUSTSEC-2020-0050.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/crates/dync/RUSTSEC-2020-0050.md b/crates/dync/RUSTSEC-2020-0050.md index 8c9e0e1..ded66ec 100644 --- a/crates/dync/RUSTSEC-2020-0050.md +++ b/crates/dync/RUSTSEC-2020-0050.md @@ -7,10 +7,14 @@ informational = "unsound" url = "https://github.com/elrnv/dync/issues/4" [versions] -patched = [] +patched = [">= 0.5.0"] ``` # VecCopy allows misaligned access to elements `VecCopy::data` is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. + +The issue was resolved in v0.5.0 by replacing data being stored by `Vec` with a custom managed +pointer. Elements are now stored and retrieved using types with proper alignment corresponding to +original types.