GitHub Advisoryadvisory · crates.io

GHSA-8xw8-mmqv-frqq fake-static allows converting any reference into a `'static` reference

HIGH Published 2021-08-25 Modified 2021-08-18 Official page ↗
Ecosystem
crates.io
Packages
fake-static
Severity
High
Weaknesses
CWE-657
Reviewed
2021-08-18

Affected packages

• crates.io fake-static: <= 0.1.0 (no fix yet)

Description

fake-static allows converting a reference with any lifetime into a reference with `'static` lifetime without the `unsafe` keyword. Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc

Related

Weakness · CWE (1)

  • CWE-657 Violation of Secure Design Principles weakness

References