Potential unsound public API

[charlesxsh]

Except the issues mentioned at #37,
At src/common.rs:76

    pub fn check_len(&self, n: usize) -> bool {
        unsafe { self.ptr.add(n) <= self.end }
    }

The index does have appropriate check and passed into pointer's add, which violates the safety requirements mentioned in document

Suggestion:

1. use self.end minus self.ptr frist

[Alexhuszagh]

This crate unfortunately is unmaintained right now and these issues are documented extensively in the RUSTSEC advisory
https://rustsec.org/advisories/RUSTSEC-2024-0379.html

Hopefully a new version will be published.

[charlesxsh]

Thanks for the confirm and reply! I found thoese issues during the tool scanning as well and simply make a note for another issue not mentioned in the discussion.