Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RUSTSEC-2020-0146: arr! macro erases lifetimes #593

Closed
github-actions bot opened this issue Mar 2, 2021 · 3 comments · Fixed by #601
Closed

RUSTSEC-2020-0146: arr! macro erases lifetimes #593

github-actions bot opened this issue Mar 2, 2021 · 3 comments · Fixed by #601

Comments

@github-actions
Copy link
Contributor

github-actions bot commented Mar 2, 2021

arr! macro erases lifetimes

Details
Package generic-array
Version 0.12.3
URL fizyk20/generic-array#98
Date 2020-04-09
Patched versions >=0.14.0
Unaffected versions <0.8.0

Affected versions of this crate allowed unsoundly extending
lifetimes using arr! macro. This may result in a variety of
memory corruption scenarios, most likely use-after-free.

See advisory page for additional details.
@tomaka
Copy link
Contributor

tomaka commented Mar 2, 2021

generic-array not used directly by us.

@mbrubeck
Copy link

mbrubeck commented Mar 2, 2021

generic-array 0.12.4 has now been released, so you can now fix this by running:

cargo update -p generic-array:0.12.3

@tomaka tomaka mentioned this issue Mar 2, 2021
Merged
@tomaka
Copy link
Contributor

tomaka commented Mar 2, 2021

@mbrubeck Thank you!

@mergify mergify bot closed this as completed in #601 Mar 2, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update generic-array tomaka/substrate-lite-1
2 participants
@mbrubeck @tomaka