VDB
Sign up
HIGH

GHSA-9g55-pg62-m8hh

Channel creates zero value of any type

Details

Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`. This is unsound e.g. if `T` is a reference type (which must be non-null). The flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` instead.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/crossbeam-channel
Introduced in: 0Fixed in: 0.4.3

Upgrade crossbeam-channel to 0.4.3 or newer (ecosystem crates.io).

References