Merge pull request #611 from JOE1994/0035-late-static

late-static: LateStatic
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-20 20:03:34 +01:00
committed by GitHub

View File

@@ -0,0 +1,19 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "late-static"
date = "2020-11-10"
url = "https://github.com/Richard-W/late-static/issues/1"
categories = ["memory-corruption"]
[versions]
patched = [">= 0.4.0"]
```
# LateStatic
Affected versions of this crate implemented `Sync` for `LateStatic` with `T: Send`, so that it is possible to create a data race to a type `T: Send + !Sync` (e.g. `Cell<T>`).
This can result in a memory corruption or other kinds of undefined behavior.
The flaw was corrected in commit 11f396c by replacing the `T: Send` bound to `T: Sync` bound in the `Sync` impl for `LateStatic<T>`.