From ec8a8485d24954706db931901edf7de4e6566d28 Mon Sep 17 00:00:00 2001 From: "pinkforest(she/her)" <36498018+pinkforest@users.noreply.github.com> Date: Wed, 4 Dec 2024 23:54:41 +1100 Subject: [PATCH] Add unmaintained `multi_mut` (#1553) * Add multi_mut * switch from unmaintained to unsound as the stronger issue type --------- Co-authored-by: Sergey "Shnatsel" Davidoff --- crates/multi_mut/RUSTSEC-0000-0000.md | 28 +++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 crates/multi_mut/RUSTSEC-0000-0000.md diff --git a/crates/multi_mut/RUSTSEC-0000-0000.md b/crates/multi_mut/RUSTSEC-0000-0000.md new file mode 100644 index 00000000..6d073719 --- /dev/null +++ b/crates/multi_mut/RUSTSEC-0000-0000.md @@ -0,0 +1,28 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "multi_mut" +date = "2020-02-07" +url = "https://github.com/golddranks/multi_mut/issues/1" +references = ["https://github.com/rust-lang/rust/issues/39155", "https://www.reddit.com/r/rust/comments/5ofuun/multi_mut_multiple_mutable_references_to_hashmap/"] +informational = "unsound" + +[versions] +patched = [] +``` +# multi_mut is Unmaintained + +Last release was about 6 years ago. + +There is an outstanding [soundness issue](https://github.com/golddranks/multi_mut/issues/1). + +The maintainer has not responded for two years to the existing soundness issue. + +Rust compiler has enabled errors relating to LLVM noalias rules and may not +compile anymore where as the old compiler versions had turned these off. + +The maintainer has stated: + +> I will take no responsibility of undefined behaviour possibly caused by this crate. + +This crate may or may not be suitable for use anymore given the outstanding issues.