—
RUSTSEC-2023-0126
Aliasing violation in `OrdSet` insertion
Details
Inserting into an `im::OrdSet` (for example by collecting an iterator into one) can violate Rust's aliasing rules: Miri reports a stacked borrows violation in `sized_chunks::Chunk::force_copy()`, which is called during insertion, where a shared borrow is invalidated by a unique borrow before the read through it completes. This is undefined behavior, reachable from safe code.
No fixed version is available, as the crate is unmaintained; its GitHub repository was archived by the owner on 2026-05-03.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io / im
Introduced in:
0.0.0-0 No fixed version published yet for im. Pin to a known-safe version or switch to an alternative.
References
- https://crates.io/crates/im [PACKAGE]
- https://rustsec.org/advisories/RUSTSEC-2023-0126.html [ADVISORY]
- https://github.com/bodil/im-rs/issues/207 [REPORT]