CVE-2021-29937 — Vulnerability in telemetry — CVE Details

`misc::vec_with_size` creates a vector of the provided `size` and immediately calls `vec.set_len(size)` on it, initially filling it with uninitialized memory. It then inserts elements using `vec[i] = value.clone()`. If the `value.clone()` call panics, uninitialized items in the vector will be dropped leading to undefined behavior. ## Withdrawal This advisory has been withdrawn because the above unsoundness cannot be triggered in safe code by dependents of the crate, as the `Clone` generic of private function `misc::vec_with_size` only instantiates to primitive types in public functions, which is impossible to panic.