HistoryEdit

RUSTSEC-2020-0013

fake-static allows converting any reference into a 'static reference

Issued
Package
fake-static (crates.io)
Type
Vulnerability
Patched
no patched versions

Description

fake-static allows converting a reference with any lifetime into a reference with 'static lifetime without the unsafe keyword.

Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc:

https://github.com/rust-lang/rust/issues/25860