Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SmallVec < 0.6.13 is unsound #299

Closed
RalfJung opened this issue May 15, 2020 · 0 comments · Fixed by #337
Closed

SmallVec < 0.6.13 is unsound #299

RalfJung opened this issue May 15, 2020 · 0 comments · Fixed by #337

Comments

@RalfJung
Copy link
Contributor

RalfJung commented May 15, 2020 •
edited
Loading

servo/rust-smallvec#162 fixes a soundness bug in SmallVec where mem::uninitialized was used incorrectly. This fix is included in 0.6.13, but previous versions are unsound. The latest version is 1.4, but given how widely used this crate is, it might still be worth having an advisory for the old broken versions.

The advisory should probably follow whatever policy ends up being in place for soundness bugs.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

add smallvec unsoundness RalfJung/advisory-db
1 participant
@RalfJung