Skip to content
OpenAdvisories

Package · crates.io

crossbeam-channel

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High —

    Channel creates zero value of any type

    Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`. This is unsound e.g. if `T` is a reference type (which must be non-null). The flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` i…

  • High 8.1

    Undefined Behavior in bounded Crossbeam channel

    Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not act…