The read_bytes_default_le function for [T; n] arrays, used to deserialize arrays of T from bytes created a [T; n] array with std::mem::uninitialized and then called T’s deserialization method. If T’s deserialization method panicked, the uninitialized memory could drop invalid objects. This flaw was corrected in v0.6.1 with commit a535678377de12bc6bc22620c5f59bcc1369f76f by removing the unsafe block and using a .map function to deserialize each element of the array instead.