search

magic-wormhole / magic-wormhole.rs

Rust implementation of Magic Wormhole, with new features and enhancements
European Union Public License 1.2
722 stars 78 forks source link

RUSTSEC-2020-0146: arr! macro erases lifetimes #114

Closed github-actions[bot] closed 3 years ago

github-actions[bot] commented 3 years ago

arr! macro erases lifetimes

Details
Package generic-array
Version 0.12.3
URL https://github.com/fizyk20/generic-array/issues/98
Date 2020-04-09
Patched versions >=0.14.0
Unaffected versions <0.8.0

Affected versions of this crate allowed unsoundly extending lifetimes using arr! macro. This may result in a variety of memory corruption scenarios, most likely use-after-free.

See advisory page for additional details.