Reported

January 20, 2021

Issued

March 12, 2023 (last modified: June 13, 2023)

Package

out-reference (crates.io)

Type

INFO Unsound

Categories

• memory-corruption

Keywords

#unsound #raw-pointer

Aliases

• GHSA-p7mj-xvxg-grff

References

• https://github.com/RustyYato/out-ref/issues/1

Patched

• >=0.2.0

Unaffected

• <0.1.0

Affected Functions

Version

out_reference::Out::from_raw

• >=0.1.0, <0.2.0

Description

Out::from_raw in affected versions allows writing a value to invalid memory address without requiring unsafe.

The soundness issue has been addressed by making Out::from_raw an unsafe function.

Advisory available under CC0-1.0 license.