RUSTSEC-2021-0145: Potential unaligned read

> Potential unaligned read

| Details | |
| ------------------- | ---------------------------------------------- |
| Status | unsound |
| Package | `atty` |
| Version | `0.2.14` |
| URL | [https://github.com/softprops/atty/issues/50](https://github.com/softprops/atty/issues/50) |
| Date | 2021-07-04 |

On windows, `atty` dereferences a potentially unaligned pointer.

In practice however, the pointer won't be unaligned unless a custom global allocator is used.

In particular, the `System` allocator on windows uses `HeapAlloc`, which guarantees a large enough alignment.

# atty is Unmaintained

A Pull Request with a fix has been provided over a year ago but the maintainer seems to be unreachable.

Last release of `atty` was almost 3 years ago.

## Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

- [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0
- [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0

See [advisory page](https://rustsec.org/advisories/RUSTSEC-2021-0145.html) for additional details.

从 RustSEC advisory 和链接的 upstream atty issue 开始，然后在此 repository 中搜索对 atty package 的引用，并检查其 dependency 声明。确定受影响的 release 是否仍在使用，并评估 advisory 中提到的替代方案。完成的标准是：在不破坏 project 的情况下，对该漏洞有一份记录在案的解决方案。

由索引模型根据 Issue 内容生成。