Multiple soundness issues in Chunk and InlineArray

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

PT-2020-16214

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the Chunk implementation has memory-safety issues. Specifically, the array size is not checked when constructed with unit, pair, or...

PT-2020-16211

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the array size is not checked when constructed with unit, pair, or From in the Chunk implementation. Additionally, the Clone and...

RUSTSEC-2020-0040 Obstack generates unaligned references

Obstack generates unaligned references for types that require a large alignment...

Obstack generates unaligned references

Obstack generates unaligned references for types that require a large alignment...

PT-2020-17526

Name of the Vulnerable Software and Affected Versions obstack crate versions prior to 0.1.4 Description The issue is related to the obstack crate generating unaligned references for types that require a large alignment. This can lead to problems when these references are used, potentially causing...

PT-2020-17612

Name of the Vulnerable Software and Affected Versions chunky crate through 2020-08-25 Description The issue concerns the Chunk API not honoring an alignment requirement, which can lead to the creation of unaligned references. This results in undefined behavior. Recommendations For versions of the...