RUSTSEC-2020-0146: arr! macro erases lifetimes

Open github-actions[bot] opened this issue 4 years ago • 0 comments

arr! macro erases lifetimes

Details
Package	`generic-array`
Version	`0.12.3`
URL	https://github.com/fizyk20/generic-array/issues/98
Date	2020-04-09
Patched versions	`>=0.14.0`
Unaffected versions	`<0.8.0`

Affected versions of this crate allowed unsoundly extending lifetimes using arr! macro. This may result in a variety of memory corruption scenarios, most likely use-after-free.

See advisory page for additional details.

Mar 02 '21 00:03 github-actions[bot]