diff --git a/crates/arrow2/RUSTSEC-0000-0000.md b/crates/arrow2/RUSTSEC-0000-0000.md new file mode 100644 index 0000000000..3086891046 --- /dev/null +++ b/crates/arrow2/RUSTSEC-0000-0000.md @@ -0,0 +1,21 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "arrow2" +date = "2024-07-07" +url = "https://github.com/jorgecarleitao/arrow2/blob/main/src/compute/sort/row/mod.rs#L272" +informational = "unsound" +categories = ["memory-exposure"] + +[affected] +functions = { "arrow2::compute::sort::row::Rows::row_unchecked" = [">= 0.14.2, <= 0.18.0"] } + +[versions] +patched = [] +``` + +# Unsoundly mark unsafe function as safe + +The function `Rows::row_unchecked` is wrongly marked as safe, which would confuse +the boundary between safe and unsafe Rust and allow illegal memory access in safe +Rust.