advisory-db/crates/autorand/RUSTSEC-2020-0103.md

[advisory]
id = "RUSTSEC-2020-0103"
package = "autorand"
date = "2020-12-31"
url = "https://github.com/mersinvald/autorand-rs/issues/5"
categories = ["memory-corruption"]

[versions]
patched = [">= 0.2.3"]

impl Random on arrays can lead to dropping uninitialized memory

Affected versions of this crate had a panic safety issue to drop partially uninitialized array of T upon panic in a user provided function T::random(). Dropping uninitialized T can potentially cause memory corruption or undefined behavior.

The flaw was corrected in commit 565d508 by using MaybeUninit<T> to avoid possible dropping of uninitialized memory upon panic.