From 07dbb7d27f04e1bf8841437cb8442d2f18ced68e Mon Sep 17 00:00:00 2001 From: JOE1994 Date: Fri, 22 Jan 2021 22:28:27 -0500 Subject: [PATCH] Report 0043-scottqueue to RustSec --- crates/scottqueue/RUSTSEC-0000-0000.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 crates/scottqueue/RUSTSEC-0000-0000.md diff --git a/crates/scottqueue/RUSTSEC-0000-0000.md b/crates/scottqueue/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..da7a909 --- /dev/null +++ b/crates/scottqueue/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "scottqueue" +date = "2020-11-15" +url = "https://github.com/rossdylan/rust-scottqueue/issues/1" +categories = ["memory-corruption"] + +[versions] +patched = [] +``` + +# Queue should have a Send bound on its Send/Sync traits + +Affected versions of this crate unconditionally implements `Send`/`Sync` for `Queue`. + +This allows (1) creating data races to a `T: !Sync` and (2) sending `T: !Send` to other threads, resulting in memory corruption or other undefined behavior.