diff --git a/crates/rulinalg/RUSTSEC-0000-0000.toml b/crates/rulinalg/RUSTSEC-0000-0000.toml new file mode 100644 index 000000000..3c76cd44c --- /dev/null +++ b/crates/rulinalg/RUSTSEC-0000-0000.toml @@ -0,0 +1,23 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "rulinalg" +date = "2020-02-11" +title = "Lifetime boundary for `raw_slice` and `raw_slice_mut` are incorrect" +url = "https://github.com/AtheMathmo/rulinalg/issues/201" +description = """ +The affected version of `rulinalg` has incorrect lifetime boundary definitions +for `RowMut::raw_slice` and `RowMut::raw_slice_mut`. They do not conform with +Rust's borrowing rule and allows the user to create multiple mutable references +to the same location. This may result in unexpected calculation result and data +race if both references are used at the same time. +""" + +[affected] + + [affected.functions] + "rulinalg::matrix::RowMut::raw_slice" = [">= 0.4.0"] + "rulinalg::matrix::RowMut::raw_slice_mut" = [">= 0.4.0"] + +[versions] +patched = [] +unaffected = ["< 0.4.0"]