cargo / arrayvec

arrayvec

cargo

A vector with fixed capacity, backed by an array (it can be stored on the stack too). Implements fixed capacity ArrayVec and ArrayString.

1 audit github.com/bluss/arrayvec

Audits

PE Patrick Elsen 2026-05-27

arrayvec@0.7.6 · 2 findings

arrayvec 0.7.6: fixed-capacity stack-allocated ArrayVec/ArrayString backed by MaybeUninit. Mirrors std::vec::Vec idioms including panic-safe Drop and BackshiftOnDrop retain. One low-severity correctness finding: extend skips ptr::write for ZSTs but still increments the length guard, causing a double-drop on non-Copy ZSTs with side-effecting Drop (reproduced against this version). Second finding: most unsafe blocks lack SAFETY comments.

datastructure-impl-boundsdatastructure-impl-correctdatastructure-impl-safedatastructure-impl-testedhas-binarieshas-build-exechas-fuzz-testshas-install-exechas-integration-testshas-property-testshas-unit-testsimpl-algorithmimpl-concurrencyimpl-cryptoimpl-datastructureimpl-interpreterimpl-jitimpl-parserimpl-protocolis-benignunsafe-documentedunsafe-minimalunsafe-safeunsafe-testeduses-concurrencyuses-cryptouses-environmentuses-execuses-filesystemuses-interpreteruses-jituses-networkuses-unsafe