anon-vec: insufficient checks in public API

This commit is contained in:
Shihao Xia
2025-05-06 16:18:24 -04:00
committed by Dirkjan Ochtman
parent 7727c950e4
commit 9c71181231

View File

@@ -0,0 +1,29 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "anon-vec"
date = "2025-05-06"
informational = "unsound"
url = "https://github.com/RylanYancey/anon-vec"
categories = ["memory-corruption"]
[affected.functions]
"anon_vec::AnonVec::get_ref" = ["<= 0.1.1"]
"anon_vec::AnonVec::get_mut" = ["<= 0.1.1"]
"anon_vec::AnonVec::remove_get" = ["<= 0.1.1"]
[versions]
patched = []
unaffected = []
```
# Lack of sufficient checks in public API
The following functions in the anon-vec crate are unsound due to insufficient checks on their
arguments::
- `AnonVec::get_ref()`
- `AnonVec::get_mut()`
- `AnonVec::remove_get()`
The crate was built as a learning project and is not being maintained.