{"id":"RUSTSEC-2021-0145","summary":"Potential unaligned read","details":"On windows, `atty` dereferences a potentially unaligned pointer.\n\nIn practice however, the pointer won't be unaligned unless a custom global allocator is used.\n\nIn particular, the `System` allocator on windows uses `HeapAlloc`, which guarantees a large enough alignment.\n\n# atty is Unmaintained\n\nA Pull Request with a fix has been provided over a year ago but the maintainer seems to be unreachable.\n\nLast release of `atty` was almost 3 years ago.\n\n## Possible Alternative(s)\n\nThe below list has not been vetted in any way and may or may not contain alternatives;\n\n - [std::io::IsTerminal](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html) - Stable since Rust 1.70.0\n - [is-terminal](https://crates.io/crates/is-terminal) - Standalone crate supporting Rust older than 1.70.0","aliases":["GHSA-g98v-hv3f-hcfr"],"modified":"2023-11-08T04:19:25.814075Z","published":"2021-07-04T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/atty"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2021-0145.html"},{"type":"REPORT","url":"https://github.com/softprops/atty/issues/50"},{"type":"WEB","url":"https://github.com/softprops/atty/pull/51"},{"type":"REPORT","url":"https://github.com/softprops/atty/issues/57"}],"affected":[{"package":{"name":"atty","ecosystem":"crates.io","purl":"pkg:cargo/atty"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}],"ecosystem_specific":{"affects":{"functions":[],"os":["windows"],"arch":[]},"affected_functions":null},"database_specific":{"categories":[],"informational":"unsound","source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2021-0145.json","cvss":null}}],"schema_version":"1.7.3"}