Affected versions of this crate did not require the buffer wrapped in Framed to be pinned,
but treated it as if it had a fixed location in memory. This may result in a use-after-free.
The flaw was corrected by making the affected functions accept Pin<&mut Self> instead of &mut self.
actix-codec
0.2.0
>= 0.3.0-beta.1
Affected versions of this crate did not require the buffer wrapped in
Framed
to be pinned, but treated it as if it had a fixed location in memory. This may result in a use-after-free.The flaw was corrected by making the affected functions accept
Pin<&mut Self>
instead of&mut self
.See advisory page for additional details.