GitHub Advisoryadvisory · crates.io

GHSA-p7mj-xvxg-grff `out_reference::Out::from_raw` should be `unsafe`

MEDIUM Published 2023-03-13 Modified 2023-03-13 Official page ↗
Ecosystem
crates.io
Packages
out-reference
Severity
Moderate
Reviewed
2023-03-13

Affected packages

• crates.io out-reference: >= 0.1.0, < 0.2.0 → fixed in 0.2.0

Description

`Out::from_raw` in affected versions allows writing a value to invalid memory address without requiring `unsafe`. The soundness issue has been addressed by making `Out::from_raw` an unsafe function.

References