GitHub Advisoryadvisory · crates.io
GHSA-gch5-hwqf-mxhp Unsoundness in `intern` methods on `intaglio` symbol interners
LOW
Official page ↗
- Ecosystem
- crates.io
- Packages
- intaglio
- Severity
- Low
- Reviewed
- 2023-07-27
Affected packages
• crates.io intaglio: < 1.9.0 → fixed in 1.9.0
Description
Affected versions of this crate have a stacked borrows violation when creating
references to interned contents. All interner types are affected.
The flaw was corrected in version 1.9.0 by reordering move and borrowing
operations and storing interned contents by raw pointer instead of as a `Box`.