From fb0b71f6fe146d7cd74fdf5d973920e7512ca11a Mon Sep 17 00:00:00 2001 From: Ralf Jung Date: Tue, 23 Jun 2020 09:59:35 +0200 Subject: [PATCH] add linked-hash-map unsoundness --- crates/linked-hash-map/RUSTSEC-0000-0000.toml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 crates/linked-hash-map/RUSTSEC-0000-0000.toml diff --git a/crates/linked-hash-map/RUSTSEC-0000-0000.toml b/crates/linked-hash-map/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000000..49c016776c --- /dev/null +++ b/crates/linked-hash-map/RUSTSEC-0000-0000.toml @@ -0,0 +1,18 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "linked-hash-map" +date = "2020-06-23" +informational = "unsound" + +title = "linked-hash-map creates uninitialized NonNull pointer" +url = "https://github.com/contain-rs/linked-hash-map/pull/100" + +description = """ +Affected versions of this crate called `mem::uninitialized()` to create a `NonNull`, +which is undefined behavior. + +The flaw was corrected by avoiding the use of `mem::uninitialized()`. +""" + +[versions] +patched = [">= 0.5.3"]