fast-able possible unsound public API (#2287)

This commit is contained in:
Shihao Xia
2025-09-11 02:58:33 -04:00
committed by GitHub
parent b8a3db1f9c
commit e149034a49

View File

@@ -0,0 +1,19 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "fast-able"
date = "2025-04-25"
categories = ["memory-corruption"]
[affected.functions]
"fast_able::vec::SyncVec::get_unchecked" = ["< 1.13.7"]
[versions]
patched = [">= 1.13.7"]
unaffected = []
```
# Possible unsound public API
The public accessible struct SyncVec has a public safe method get_unchecked. It accept a parameter index and used in the get_unchecked without sufficient checks as mentioned [here](https://doc.rust-lang.org/std/primitive.slice.html#method.get_unchecked).