RUSTSEC-2020-0146: arr! macro erases lifetimes
github-actions opened this issue · 0 comments
github-actions commented
arr! macro erases lifetimes
| Details | |
|---|---|
| Package | generic-array |
| Version | 0.12.3 |
| URL | fizyk20/generic-array#98 |
| Date | 2020-04-09 |
| Patched versions | >=0.14.0 |
| Unaffected versions | <0.8.0 |
Affected versions of this crate allowed unsoundly extending
lifetimes using arr! macro. This may result in a variety of
memory corruption scenarios, most likely use-after-free.
See advisory page for additional details.