GitHub Advisoryadvisory · crates.io

GHSA-82hm-vh7g-hrh9 Partial read is incorrect in molecule

MEDIUM Published 2021-08-25 Modified 2021-09-09 Official page ↗
Ecosystem
crates.io
Packages
molecule
Severity
Moderate
Reviewed
2021-08-02

Affected packages

• crates.io molecule: < 0.7.2 → fixed in 0.7.2

Description

Impact Anyone who uses `total_size(..)` function to partial read the length of any `FixVec` will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release. Workarounds If you already have the whole `FixVec` `A`, you can use `A.as_slice().len()` to get the total size of the `FixVec`. For more information If you have any questions or comments about this advisory: • Open an issue to ask use directly.

References