Skip to content

Commit 86a52c6

Browse files
committed
Fixed version released for temporary
1 parent 3c0dced commit 86a52c6

File tree

1 file changed

+5
-14
lines changed

1 file changed

+5
-14
lines changed

crates/temporary/RUSTSEC-0000-0000.md

Lines changed: 5 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,13 @@ categories = ["memory-exposure"]
77
keywords = ["uninitialized-memory"]
88

99
[versions]
10-
patched = []
10+
patched = [">= 0.6.4"]
1111
unaffected = ["< 0.3.0"]
1212
```
1313

14-
# Use of uninitialized memory as a RNG seed in temporary
14+
# Use of uninitialized memory in temporary
15+
16+
Uninit memory is used as a RNG seed in temporary
1517

1618
The following function is used as a way to get entropy from the system, which does operations on and exposes uninit memory, which is UB.
1719

@@ -22,15 +24,4 @@ fn random_seed(_: &Path, _: &str) -> [u64; 2] {
2224
}
2325
```
2426

25-
In addition, in release mode, the file names returned are completely predictable, as this test shows, which must be run in release.
26-
27-
```rust
28-
fn main() {
29-
assert_eq!(
30-
temporary::Directory::new("foo").unwrap().into_path(),
31-
std::path::Path::new("/tmp/foo.aaaaaaaaaaaa")
32-
);
33-
}
34-
```
35-
36-
[tempfile](https://crates.io/crates/tempfile) is the suggested replacement crate.
27+
This has been resolved in the 0.6.4 release.

0 commit comments

Comments
 (0)