GitHub Advisoryadvisory · crates.io
GHSA-8gj8-hv75-gp94 `SegQueue` creates zero value of any type
MEDIUM
Official page ↗
- Ecosystem
- crates.io
- Packages
- crossbeam
- Severity
- Moderate
- Reviewed
- 2022-06-16
Affected packages
• crates.io crossbeam: < 0.7.0 → fixed in 0.7.0
Description
Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`.
This is unsound e.g. if `T` is a reference type (which must be non-null).
The flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` instead.