RUSTSEC-2020-0041: Multiple soundness issues in Chunk and InlineArray

[github-actions]

Multiple soundness issues in Chunk and InlineArray

Details
Package	sized-chunks
Version	0.6.2
URL	bodil/sized-chunks#11
Date	2020-09-06

Chunk:

• Array size is not checked when constructed with unit() and pair().
• Array size is not checked when constructed with From<InlineArray<A, T>>.
• Clone and insert_from are not panic-safe; A panicking iterator causes memory safety issues with them.

InlineArray:

• Generates unaligned references for types with a large alignment requirement.

See advisory page for additional details.

[vorner]

Known, but no migration path available right now :-(. The maintainer seems unresponsive.

Though it seems that the way it is used, these issues are not triggered and the problem is more in the sense „If someone used the crate directly…“

Keeping it open until this gets resolved, though.