VDB
Sign up
CRITICAL9.8

GHSA-3vv3-frrq-6486

Use of Uninitialized Resource in alg_ds

Details

An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. `Matrix::new()` internally calls `Matrix::fill_with()` which uses `*ptr = value` pattern to initialize the buffer. This pattern assumes that there is an initialized struct at the address and drops it, which results in dropping of uninitialized struct.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/alg_ds
Introduced in: 0

No fixed version published yet for alg_ds. Pin to a known-safe version or switch to an alternative.

References