OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-13 21:18:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
d30ca831602ec928feaba99d7a04bb2a17643f73
advisory-db/crates/crossbeam/RUSTSEC-2022-0020.md
Alexis Mousset 84c633df9c Update aliases from GHSA OSV export (#1693)
2023-06-13 15:10:24 +02:00

559 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2022-0020"
package = "crossbeam"
date = "2022-05-10"
informational = "unsound"
url = "https://github.com/crossbeam-rs/crossbeam/pull/458"
aliases = ["GHSA-8gj8-hv75-gp94"]

[versions]
patched = [">= 0.7.0"]

SegQueue creates zero value of any type

Affected versions of this crate called mem::zeroed() to create values of a user-supplied type T. This is unsound e.g. if T is a reference type (which must be non-null).

The flaw was corrected by avoiding the use of mem::zeroed(), using MaybeUninit instead.