Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RUSTSEC-2020-0146: arr! macro erases lifetimes #228

Closed
github-actions bot opened this issue Mar 2, 2021 · 2 comments
Closed

RUSTSEC-2020-0146: arr! macro erases lifetimes #228

github-actions bot opened this issue Mar 2, 2021 · 2 comments

Comments

@github-actions
Copy link

github-actions bot commented Mar 2, 2021

arr! macro erases lifetimes

Details
Package generic-array
Version 0.12.3
URL fizyk20/generic-array#98
Date 2020-04-09
Patched versions >=0.14.0
Unaffected versions <0.8.0

Affected versions of this crate allowed unsoundly extending
lifetimes using arr! macro. This may result in a variety of
memory corruption scenarios, most likely use-after-free.

See advisory page for additional details.
@giarc3
Copy link
Member

giarc3 commented Mar 10, 2021

This comes from an outdated sha2 in our ironcore-search-helpers

@giarc3
Copy link
Member

giarc3 commented May 6, 2021

ironoxide will now pull the patched version (0.12.4), so there's nothing more we have to do

@giarc3 giarc3 closed this as completed May 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@giarc3