https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:22:37 +0000 https://vulnerability.circl.lu/vuln/rustsec-2025-0105 <p><strong>Affected:</strong> crates.io: direct_ring_buffer</p> <p>The safe function `create_ring_buffer` allocates a buffer using `Vec::with_capacity` followed by `set_len`, creating a `Box&lt;[T]&gt;` containing uninitialized memory.</p> <p>This leads to undefined behavior when functions like `write_slices` create typed slices (e.g., `&amp;mut [bool]`) over the uninitialized memory, violating Rust&#39;s validity invariants. The issue has been confirmed using Miri.</p> <p>Fixed in version 0.2.2 by using `resize_with` to properly initialize the buffer with `T::default()`, adding a `T: Default` bound to ensure sound initialization.</p> <p><strong>Affected:</strong> crates.io: direct_ring_buffer</p> <p>The safe function `create_ring_buffer` allocates a buffer using `Vec::with_capacity` followed by `set_len`, creating a `Box&lt;[T]&gt;` containing uninitialized memory.</p> <p>This leads to undefined behavior when functions like `write_slices` create typed slices (e.g., `&amp;mut [bool]`) over the uninitialized memory, violating Rust&#39;s validity invariants. The issue has been confirmed using Miri.</p> <p>Fixed in version 0.2.2 by using `resize_with` to properly initialize the buffer with `T::default()`, adding a `T: Default` bound to ensure sound initialization.</p> https://vulnerability.circl.lu/vuln/rustsec-2025-0105