From a68e26e31bb02c817aa79a695c1ac3c14eac124e Mon Sep 17 00:00:00 2001 From: Jungwon Lim Date: Mon, 18 Jan 2021 21:48:39 -0500 Subject: [PATCH] Add advisory for data race in hashconsing --- crates/hashconsing/RUSTSEC-0000-0000.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 crates/hashconsing/RUSTSEC-0000-0000.md diff --git a/crates/hashconsing/RUSTSEC-0000-0000.md b/crates/hashconsing/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..137f666 --- /dev/null +++ b/crates/hashconsing/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "hashconsing" +date = "2020-11-10" +url = "https://github.com/AdrienChampion/hashconsing/issues/1" +categories = ["memory-corruption"] +keywords = ["concurrency"] +[versions] +patched = [">= 1.1.0"] +``` + +# hashconsing's HConsed lacks Send/Sync bound for its Send/Sync trait. + +Affected versions of `hashconsing` implements `Send`/`Sync` for its `HConsed` type without restricting it to `Send`able types and `Sync`able types. + +This allows non-`Sync` types such as `Cell` to be shared across threads leading to undefined behavior and memory corruption in concurrent programs. \ No newline at end of file