You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello 🦀 ,
we (Rust group @sslab-gatech) found a memory-safety/soundness issue in this crate while scanning Rust code on crates.io for potential vulnerabilities.
Hello 🦀 ,
we (Rust group @sslab-gatech) found a memory-safety/soundness issue in this crate while scanning Rust code on crates.io for potential vulnerabilities.
Issue Description
In https://docs.rs/elementwise/0.3.2/src/elementwise/macros/array.rs.html ,
std::mem::uninitialized
is used in the macros.core::ops::Mul
is a public trait that can be implmented on custom types,and users can provide
Mul
implementations that can potentially panic.If a panic happens, the partially uninitialized
items
will be dropped,and dropping uninitialized memory will cause undefined behavior.
Thank you for checking out this issue 👍
The text was updated successfully, but these errors were encountered: