Add advisory for Amanieu/thread_local-rs#33 (#1169)

* Create RUSTSEC-0000-0000.md

* Correct folder

* Revert "Correct folder"

This reverts commit 0dbbd24844e040f8ed95f21f91740781a3317136.

* Correct package name

Co-authored-by: Sergey "Shnatsel" Davidoff <sdavydov@google.com>
This commit is contained in:
Ibraheem Ahmed
2022-01-24 09:36:41 -05:00
committed by GitHub
parent 0ca65bbdd4
commit 1ecfb4a345

View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "thread_local"
categories = ["memory-corruption"]
date = "2022-01-23"
url = "https://github.com/Amanieu/thread_local-rs/issues/33"
[versions]
patched = [">= 1.1.4"]
```
# Data race in `Iter` and `IterMut`
In the affected version of this crate, `{Iter, IterMut}::next` used a weaker memory ordering when loading values than what was required, exposing a potential data race
when iterating over a `ThreadLocal`'s values.
Crates using `Iter::next`, or `IterMut::next` are affected by this issue.