Reported

September 10, 2023

Issued

September 10, 2023 (last modified: February 10, 2024)

Package

users (crates.io)

Type

INFO Unsound

Keywords

#unaligned-read

Aliases

• GHSA-jcr6-4frq-9gjj

References

• https://github.com/ogham/rust-users/issues/55

Patched

no patched versions

Description

Affected versions dereference a potentially unaligned pointer. The pointer is commonly unaligned in practice, resulting in undefined behavior.

In some build modes, this is observable as a panic followed by abort. In other build modes the UB may manifest in some other way, including the possibility of working correctly in some architectures.

The crate is not currently maintained, so a patched version is not available.

Recommended alternatives

• uzers (an actively maintained fork of the users crate)
• sysinfo

Advisory available under CC0-1.0 license.