Skip to content

RUSTSEC-2021-0115: #[zeroize(drop)] doesn't implement Drop for enums #208

@github-actions

Description

@github-actions

#[zeroize(drop)] doesn't implement Drop for enums

Details
Package zeroize_derive
Version 0.7.0
URL iqlusioninc/crates#876
Date 2021-09-24
Patched versions >=1.1.1

Affected versions of this crate did not implement Drop when #[zeroize(drop)] was used on an enum.

This can result in memory not being zeroed out after dropping it, which is exactly what is intended when adding this attribute.

The flaw was corrected in version 1.2 and #[zeroize(drop)] on enums now properly implements Drop.

See advisory page for additional details.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions