Skip to content
OpenAdvisories

Package · crates.io

owned-alloc

2 known vulnerabilities.

2 results · Feed

  • Unscored —

    `owned-alloc` is unmaintained

    The `owned-alloc` crate has had no release since 2018, and the maintainer has not responded to the upstream issue or to direct contact.

  • Unscored —

    Double free in `OwnedAlloc::drop_in_place` when the contained value's `Drop` panics

    `OwnedAlloc::drop_in_place` destroys the contained value by hand, then commits the ownership transfer with `mem::forget(self)` — which lives inside `into_raw` and so runs only after the destruction. `T::drop` is user code and may panic. If it does, the forget…