From 1ecfb4a345aaf3cbf10f4222a01654e5383482b6 Mon Sep 17 00:00:00 2001 From: Ibraheem Ahmed Date: Mon, 24 Jan 2022 09:36:41 -0500 Subject: [PATCH] Add advisory for Amanieu/thread_local-rs#33 (#1169) * Create RUSTSEC-0000-0000.md * Correct folder * Revert "Correct folder" This reverts commit 0dbbd24844e040f8ed95f21f91740781a3317136. * Correct package name Co-authored-by: Sergey "Shnatsel" Davidoff --- crates/thread_local/RUSTSEC-0000-0000.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 crates/thread_local/RUSTSEC-0000-0000.md diff --git a/crates/thread_local/RUSTSEC-0000-0000.md b/crates/thread_local/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..1cd800f --- /dev/null +++ b/crates/thread_local/RUSTSEC-0000-0000.md @@ -0,0 +1,18 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "thread_local" +categories = ["memory-corruption"] +date = "2022-01-23" +url = "https://github.com/Amanieu/thread_local-rs/issues/33" + +[versions] +patched = [">= 1.1.4"] +``` + +# Data race in `Iter` and `IterMut` + +In the affected version of this crate, `{Iter, IterMut}::next` used a weaker memory ordering when loading values than what was required, exposing a potential data race +when iterating over a `ThreadLocal`'s values. + +Crates using `Iter::next`, or `IterMut::next` are affected by this issue.