diff --git a/crates/thread_local/RUSTSEC-0000-0000.md b/crates/thread_local/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..1cd800f --- /dev/null +++ b/crates/thread_local/RUSTSEC-0000-0000.md @@ -0,0 +1,18 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "thread_local" +categories = ["memory-corruption"] +date = "2022-01-23" +url = "https://github.com/Amanieu/thread_local-rs/issues/33" + +[versions] +patched = [">= 1.1.4"] +``` + +# Data race in `Iter` and `IterMut` + +In the affected version of this crate, `{Iter, IterMut}::next` used a weaker memory ordering when loading values than what was required, exposing a potential data race +when iterating over a `ThreadLocal`'s values. + +Crates using `Iter::next`, or `IterMut::next` are affected by this issue.