rustsec / rustsec/advisory-db

`safe-uninit` is unsound

Open
#1,265 19 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Unsound
Dominant language
No language data
Stars
1.2k
Forks
544
Avg merge
1d 10h
Merged PRs (30d)
45

Description

rust playground

the above example doesnt reproduce using the actual crate in question but its "safe" wrapper is literally just:
fn safe_uninit() -> Self { unsafe { MaybeUninit::uninit().assume_init() } }

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked Rust Playground example and the safe_uninit wrapper shown in the issue. Read the 19-comment discussion to determine the affected crate and the advisory-db entry that should be updated. Done means the unsoundness and its scope are confirmed and the appropriate advisory record or follow-up is clearly identified.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.