Files
advisory-db/crates/smallvec/RUSTSEC-2018-0018.toml
github-actions[bot] ce0b60265d Assign RUSTSEC-2018-0018 to smallvec (#341)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-24 11:48:53 -04:00

19 lines
601 B
TOML

[advisory]
id = "RUSTSEC-2018-0018"
package = "smallvec"
date = "2018-09-25"
informational = "unsound"
title = "smallvec creates uninitialized value of any type"
url = "https://github.com/servo/rust-smallvec/issues/126"
description = """
Affected versions of this crate called `mem::uninitialized()` to create values of a user-supplied type `T`.
This is unsound e.g. if `T` is a reference type (which must be non-null and thus may not remain uninitialized).
The flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead.
"""
[versions]
patched = [">= 0.6.13"]