Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut
Package
Affected versions
>= 0.2.2, < 0.2.9
>= 0.3.0, < 0.3.2
= 0.4.0
>= 0.5.0, < 0.5.2
>= 0.6.0, < 0.6.6
>= 0.7.0, < 0.7.31
Patched versions
0.2.9
0.3.2
0.4.1
0.5.2
0.6.6
0.7.31
Description
Published to the GitHub Advisory Database
Dec 15, 2023
Reviewed
Dec 15, 2023
Last updated
Dec 18, 2023
This advisory is also published as RUSTSEC-2023-0074.
The
Refmethodsinto_ref,into_mut,into_slice, andinto_slice_mutare unsound and may allow safe code to exhibit undefined behavior when used withRef<B, T>whereBiscell::Reforcell::RefMut. Note that these methods remain sound when used withBtypes other thancell::Reforcell::RefMut.See google/zerocopy#716 for a more in-depth analysis.
The current plan is to yank the affected versions soon. See google/zerocopy#679 for more detail.
References