PT-2026-60256 · Crates.Io · Cxx
Published
2026-07-05
·
Updated
2026-07-05
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In affected versions of this crate,
let cxx string! is not exception safe. After creating the StackString, if match $value panics, the content of StackString is not yet initialized, while the drop implementation of StackString unconditionally deinitializes the content, leading to use of uninitialized value.The soundness issue was fixed in version
1.0.195 by moving drop logics to separate drop guard after initializing the StackString. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cxx