GitHub Advisoryadvisory · crates.io

GHSA-gch5-hwqf-mxhp Unsoundness in `intern` methods on `intaglio` symbol interners

LOW Published 2023-07-27 Modified 2023-07-27 Official page ↗
Ecosystem
crates.io
Packages
intaglio
Severity
Low
Reviewed
2023-07-27

Affected packages

• crates.io intaglio: < 1.9.0 → fixed in 1.9.0

Description

Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a `Box`.

References