- Reported
-
- Issued
-
- Package
-
ruint
(crates.io)
- Type
-
Vulnerability
- Categories
-
- Keywords
-
#soundness
#out-of-bounds
- References
-
- Patched
-
no patched versions
- Affected Functions
- Version
ruint::algorithms::div::reciprocal_mg10
-
Description
The function reciprocal_mg10 is marked as safe but can trigger undefined behavior (out-of-bounds access) because it relies on debug_assert! for safety checks instead of assert!.
When compiled in release mode, the debug_assert! is optimized out, potentially allowing invalid inputs to cause memory corruption.
Advisory available under CC0-1.0
license.