Impact

Anyone who uses total_size(..) function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release.

Workarounds

If you already have the whole FixVec A, you can use A.as_slice().len() to get the total size of the FixVec.

For more information

If you have any questions or comments about this advisory:

• Open an issue to ask use directly.

References

• GHSA-82hm-vh7g-hrh9
• nervosnetwork/molecule#49
• https://rustsec.org/advisories/RUSTSEC-2021-0103.html