Initial report for 0008-arr

crates/arr/RUSTSEC-0000-0000.toml

@@ -0,0 +1,16 @@
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "arr"
+date = "2020-08-25"
+title = "Multiple security issues including data race, buffer overflow, and uninitialized memory drop"
+url = "https://github.com/sjep/array/issues/1"
+description = """
+`arr` crate contains multiple security issues. Specifically,
+
+1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary.
+2. `Index` and `IndexMut` implementation does not check the array bound.
+3. `Array::new_from_template()` drops uninitialized memory.
+"""
+
+[versions]
+patched = []