Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2022-0040: Multiple soundness issues in owning_ref #229

Closed
github-actions bot opened this issue Aug 3, 2022 · 1 comment
Closed

RUSTSEC-2022-0040: Multiple soundness issues in owning_ref #229

github-actions bot opened this issue Aug 3, 2022 · 1 comment
Labels
help wanted Extra attention is needed I-sec-advisory Issue: Security advisory issues

Comments

@github-actions
Copy link

github-actions bot commented Aug 3, 2022

Multiple soundness issues in owning_ref

Details
Package owning_ref
Version 0.4.1
URL https://github.com/noamtashma/owning-ref-unsoundness
Date 2022-01-26
  • OwningRef::map_with_owner is unsound and may result in a use-after-free.
  • OwningRef::map is unsound and may result in a use-after-free.
  • OwningRefMut::as_owner and OwningRefMut::as_owner_mut are unsound and may result in a use-after-free.
  • The crate violates Rust's aliasing rules, which may cause miscompilations on recent compilers that emit the LLVM noalias attribute.

No patched versions are available at this time. While a pull request with some fixes is outstanding, the maintainer appears to be unresponsive.

See advisory page for additional details.

@iduartgomez iduartgomez added the I-sec-advisory Issue: Security advisory issues label Aug 21, 2022
@iduartgomez iduartgomez added the help wanted Extra attention is needed label Sep 30, 2022
@iduartgomez
Copy link
Collaborator

Solved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed I-sec-advisory Issue: Security advisory issues
Projects
None yet
Development

No branches or pull requests

1 participant