Skip to content

Commit da1c1e4

Browse files
Add advisory for array-init-cursor (#2264)
1 parent dcb888c commit da1c1e4

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
```toml
2+
[advisory]
3+
id = "RUSTSEC-0000-0000"
4+
package = "array-init-cursor"
5+
date = "2025-03-27"
6+
url = "https://github.com/planus-org/planus/issues/293"
7+
informational = "unsound"
8+
categories = ["memory-corruption"]
9+
10+
[versions]
11+
patched = [">= 0.2.1"]
12+
```
13+
14+
# `array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop`
15+
16+
The `Drop` implementation will get run twice when using the cursor.
17+
18+
This issue does not affect you, if you are using only using the crate with
19+
types that are `Copy` such as `u8`.
20+
21+
This issue also does not affect you, if you are only depending on it through
22+
the crate `planus`.

0 commit comments

Comments
 (0)