advisory-db icon indicating copy to clipboard operation
advisory-db copied to clipboard

Published 20 hours ago • verified publisher icon rustsec

`multi_mut` is unsound

Open Shnatsel opened this issue 2 years ago • 3 comments

https://github.com/golddranks/multi_mut has been written before Rust had an aliasing model, and before &mut had noalias annotations in LLVM. It violates Stacked Borrows and is likely UB under current LLVM behavior:

https://github.com/golddranks/multi_mut/issues/1

Shnatsel avatar Jan 17 '23 13:01 Shnatsel

Ideally we should understand the practical implications of this before filing an advisory.

Shnatsel avatar Jan 17 '23 13:01 Shnatsel

We could perhaps just flag unmaintained and mention the soundness issue perhaps - last release was like 6 years ago

pinkforest avatar Feb 01 '23 09:02 pinkforest

There is also https://crates.io/crates/splitmut - https://www.reddit.com/r/rust/comments/5ofuun/comment/dcj7she/?utm_source=share&utm_medium=web2x&context=3

hasn't been updated for five years

pinkforest avatar Feb 01 '23 10:02 pinkforest