~ / search / GHSA-x54v-qxxr-93qc

GHSA-x54v-qxxr-93qc

Missing release of memory in sized-chunks

Source: GitHub Advisory Database (reviewed) High CVE-2020-25795

Packages

EcosystemPackageAffectedFixed in
crates.io sized-chunks < 0.6.3 0.6.3

Details

As written in the advisory (Markdown source, shown as plain text).

Chunk: * Array size is not checked when constructed with unit() and pair(). * Array size is not checked when constructed with From<InlineArray<A, T>>. * Clone and insert_from are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: * Generates unaligned references for types with a large alignment requirement.

References

External links from the advisory. They lead to third-party sites.