Add advisory for data race in dces

This commit is contained in:
Ammar Askar
2021-01-18 21:28:20 -08:00
parent 3fbe06486f
commit 4fafd5c990

View File

@@ -0,0 +1,20 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "dces"
date = "2020-12-09"
url = "https://gitlab.redox-os.org/redox-os/dces-rust/-/issues/8"
categories = ["memory-corruption"]
keywords = ["concurrency"]
[versions]
patched = []
```
# dces' World type can cause data races
The `World` type in `dces` is marked as `Send` without bounds on its
`EntityStore` and `ComponentStore`.
This allows non-thread safe `EntityStore` and `ComponentStore`s to be sent
across threads and cause data races.