MEDIUM
GHSA-m2xr-2vj4-wh94
tanton_engine has unsound public API
Details
The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary checks in public API:
- `Stack::offset()` - `ThreadStack::get()` - `RootMoveList::insert_score_depth()` - `RootMoveList::insert_score()`
The tanton_engine crate is no longer maintained, so there are no plans to fix this issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/tanton_engine
Introduced in:
0No fixed version published yet for tanton_engine. Pin to a known-safe version or switch to an alternative.