GitHub Advisoryadvisory · crates.io

GHSA-6888-wf7j-34jq `SegQueue` creates zero value of any type

MEDIUM Published 2022-06-16 Modified 2022-06-16 Official page ↗
Ecosystem
crates.io
Packages
crossbeam-queue
Severity
Moderate
Reviewed
2022-06-16

Affected packages

• crates.io crossbeam-queue: < 0.2.3 → fixed in 0.2.3

Description

Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`. This is unsound e.g. if `T` is a reference type (which must be non-null). The flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` instead.

References