RUSTSEC-2020-0013
fake-static allows converting any reference into a 'static reference
- Reported
- Issued
- Package
- fake-static (crates.io)
- Type
- Vulnerability
- Aliases
- Patched
- no patched versions
Description
fake-static allows converting a reference with any lifetime into
a reference with 'static lifetime without the unsafe keyword.
Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc:
https://github.com/rust-lang/rust/issues/25860
Advisory available under CC0-1.0 license.