GitHub Advisoryadvisory · crates.io

GHSA-jmwx-r3gq-qq3p vec-const attempts to construct a Vec from a pointer to a const slice

MEDIUM Published 2022-06-17 Modified 2022-06-17 Official page ↗
Ecosystem
crates.io
Packages
vec-const
Severity
Moderate
Reviewed
2022-06-17

Affected packages

• crates.io vec-const: < 2.0.0 → fixed in 2.0.0

Description

Affected versions of this crate claimed to construct a const `Vec` with nonzero length and capacity, but that cannot be done because such a `Vec` requires a pointer from an allocator. The implementation was later changed to just construct a `std::borrow::Cow`.

References