GHSA-6wp2-fw3v-mfmc
Memory corruption in array-tools
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| crates.io | array-tools | < 0.3.2 | 0.3.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in the array-tools crate before 0.3.2 for Rust. Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided `T::clone()` panics in `FixedCapacityDequeLike<T, A>::clone()`. This causes memory corruption.
References
External links from the advisory. They lead to third-party sites.