rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2025-12-27 01:54:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

Lexical is maintained again, unsoundness is fixed

Browse Source
This commit is contained in:
Sergey "Shnatsel" Davidoff
2024-09-15 06:58:17 +01:00
committed by GitHub
parent 7fbf1e630a
commit 789aec01a3
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
crates/lexical/RUSTSEC-2023-0055.md
View File

@@ -8,7 +8,7 @@ references = ["https://github.com/Alexhuszagh/rust-lexical/issues/102", "https:/
aliases = ["GHSA-c2hm-mjxv-89r4"] aliases = ["GHSA-c2hm-mjxv-89r4"]
[versions] [versions]
patched = [] patched = [">= 7.0.0"]
``` ```
# Multiple soundness issues # Multiple soundness issues
@@ -20,7 +20,7 @@ patched = []
1. [The `BytesIter` trait has safety invariants but is public and not marked `unsafe`](https://github.com/Alexhuszagh/rust-lexical/issues/104) 1. [The `BytesIter` trait has safety invariants but is public and not marked `unsafe`](https://github.com/Alexhuszagh/rust-lexical/issues/104)
1. [`write_float()` calls `MaybeUninit::assume_init()` on uninitialized data, which is is not allowed by the Rust abstract machine](https://github.com/Alexhuszagh/rust-lexical/issues/95) 1. [`write_float()` calls `MaybeUninit::assume_init()` on uninitialized data, which is is not allowed by the Rust abstract machine](https://github.com/Alexhuszagh/rust-lexical/issues/95)
The crate also has some correctness issues and appears to be unmaintained. The crate also has some correctness issues.
## Alternatives ## Alternatives