PT-2024-40974 · Crates.Io · Xous
Published
2024-12-23
·
Updated
2024-12-23
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
No specific software or versions are mentioned, so the information cannot be determined.
Description
The issue concerns the
as slice and as slice mut functions, which are considered unsound. This is because any pointer, regardless of its bit pattern, can be cast to a slice of arbitrary types. The creation of such pointers can be done using unsafe new and the deprecated from parts function. It is suggested that from parts should be removed in the latest version to help prevent unsoundness in as slice. Since new is declared as unsafe, it is recommended that as slice should also be declared as unsafe.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Xous