From 320268aaf83f280a96940de0aaf529d6cb19a4bc Mon Sep 17 00:00:00 2001 From: JOE1994 Date: Tue, 19 Jan 2021 23:16:17 -0500 Subject: [PATCH] Report 0035-late-static to RustSec --- crates/late-static/RUSTSEC-0000-0000.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 crates/late-static/RUSTSEC-0000-0000.md diff --git a/crates/late-static/RUSTSEC-0000-0000.md b/crates/late-static/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..458b441 --- /dev/null +++ b/crates/late-static/RUSTSEC-0000-0000.md @@ -0,0 +1,19 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "late-static" +date = "2020-11-10" +url = "https://github.com/Richard-W/late-static/issues/1" +categories = ["memory-corruption"] + +[versions] +patched = [">= 0.4.0"] +``` + +# LateStatic + +Affected versions of this crate implemented `Sync` for `LateStatic` with `T: Send`, so that it is possible to create a data race to a type `T: Send + !Sync` (e.g. `Cell`). + +This can result in a memory corruption or other kinds of undefined behavior. + +The flaw was corrected in commit 11f396c by replacing the `T: Send` bound to `T: Sync` bound in the `Sync` impl for `LateStatic`. \ No newline at end of file