New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

UB fixed in smallvec >= 1.13.2 #1960

Open

gendx opened this issue May 15, 2024 · 0 comments

gendx commented May 15, 2024

According to servo/rust-smallvec#343, the smallvec crate had undefined behavior in the Smallvec::insert() function in versions >= 1.8.1, <= 1.13.1 (servo/rust-smallvec#343 (comment)).

Given the number of downloads and crates depending on it, it's probably worth recording it in the advisory database.

The text was updated successfully, but these errors were encountered:

gendx mentioned this issue

SmallVec::insert is UB on large arguments servo/rust-smallvec#343

Closed

problame added a commit to neondatabase/neon that referenced this issue


          build(deps): bump smallvec to 1.13.2 to get UB fix

c4620cf

Smallvec 1.13.2 contains [an UB fix](servo/rust-smallvec#345).

Upstream opened [a request](rustsec/advisory-db#1960)
for this in the advisory-db but it never got acted upon.

Found while working on #9321.

problame mentioned this issue

build(deps): bump smallvec to 1.13.2 to get UB fix neondatabase/neon#9781

Merged

problame added a commit to neondatabase/neon that referenced this issue


          build(deps): bump smallvec to 1.13.2 to get UB fix (#9781)

b6154b0

Smallvec 1.13.2 contains [an UB
fix](servo/rust-smallvec#345).

Upstream opened [a
request](rustsec/advisory-db#1960)
for this in the advisory-db but it never got acted upon.

Found while working on #9321.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment