GitHub Advisoryadvisory · crates.io

GHSA-67r5-rqwv-9p9q array-init-cursor is unsound when used with types that implement `Drop`

LOW Published 2025-03-31 Modified 2025-03-31 Official page ↗
Ecosystem
crates.io
Packages
array-init-cursor
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Weaknesses
CWE-672
Reviewed
2025-03-31

Affected packages

• crates.io array-init-cursor: < 0.2.1 → fixed in 0.2.1

Description

The `Drop` implementation will get run twice when using the cursor. This issue does not affect you, if you are using only using the crate with types that are `Copy` such as `u8`. This issue also does not affect you, if you are only depending on it through the crate `planus`.

Related

Weakness · CWE (1)

  • CWE-672 Operation on a Resource after Expiration or Release weakness

References