Skip to content

Commit

Permalink
Add unsound advisory for mimalloc (#2098)
Browse files Browse the repository at this point in the history
  • Loading branch information
nathaniel-daniel authored Nov 10, 2024
1 parent 6dbff23 commit e3df454
Showing 1 changed file with 17 additions and 0 deletions.
17 changes: 17 additions & 0 deletions crates/mimalloc/RUSTSEC-0000-0000.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "mimalloc"
date = "2022-11-23"
url = "https://github.com/purpleprotocol/mimalloc_rust/issues/87"
informational = "unsound"

[versions]
patched = [">= 0.1.39"]
```

# Mimalloc Can Allocate Memory with Bad Alignment
This crate depended on a promise regarding alignments made by the author of the mimalloc allocator to avoid using aligned allocation functions where possible for performance reasons.
Since then, the mimalloc allocator's logic changed, making it break this promise.
This caused this crate to return memory with an incorrect alignment for some allocations, particularly those with large alignments.
The flaw was fixed by always using the aligned allocation functions.

0 comments on commit e3df454

Please sign in to comment.