Skip to content

Commit a3e809f

Browse files
Assigned RUSTSEC-2023-0087 to simd-json-derive (#2126)
Co-authored-by: amousset <[email protected]>
1 parent 3a569e8 commit a3e809f

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

.duplicate-id-guard

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
This file causes merge conflicts if two ID assignment jobs run concurrently.
22
This prevents duplicate ID assignment due to a race between those jobs.
3-
7c4dd59d9b0c868406fb44dbd1232b8e9085a5a863794b986a8cbd9ccac8b49c -
3+
bce67f0e5542ba57284b5f5636ac4da80340ff92fb47da55ed7992d89499f3ac -

crates/simd-json-derive/RUSTSEC-0000-0000.md renamed to crates/simd-json-derive/RUSTSEC-2023-0087.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
```toml
22
[advisory]
33

4-
id = "RUSTSEC-0000-0000"
4+
id = "RUSTSEC-2023-0087"
55

66
package = "simd-json-derive"
77

@@ -25,4 +25,4 @@ patched = [">= 0.12.0"]
2525

2626
An invalid use of `MaybeUninit::uninit().assume_init()` in `simd-json-derive`'s derive macro can cause undefined behavior. The original code used `MaybeUninit` to avoid initialisation of the struct and then set the fields using `ptr::write`. The undefined behavior triggered by this misuse of `MaybeUninit` can lead to invlaid memory access and panics in binaries compiled in release mode (aka simd-json-derive prior to version 0.12 has UB and optimizes into some nonsense)
2727

28-
The `0.12.0` removes this section of code, avoiding the use of MaybeUninit alltogether.
28+
The `0.12.0` removes this section of code, avoiding the use of MaybeUninit alltogether.

0 commit comments

Comments
 (0)