From 6ea698b85d7119b0bb5468d9cd1891f0a5b20b14 Mon Sep 17 00:00:00 2001 From: Niklas Fiekas Date: Sun, 17 Jan 2021 21:33:37 +0100 Subject: [PATCH 1/2] lazy-init: Missing Send bound for Lazy (khuey/lazy-init#9) --- crates/lazy-init/RUSTSEC-0000-0000.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 crates/lazy-init/RUSTSEC-0000-0000.md diff --git a/crates/lazy-init/RUSTSEC-0000-0000.md b/crates/lazy-init/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..8f72fa1 --- /dev/null +++ b/crates/lazy-init/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "lazy-init" +date = "2021-01-17" +informational = "unsound" +url = "https://github.com/khuey/lazy-init/issues/9" + +[versions] +patched = ["> 0.4.0"] +``` + +# Missing Send bound for Lazy + +All current versions of this crate allow causing data races in safe code. + +The flaw will be fixed in the next release. From 6703edaf88baef7ed605edbc1b64132f3d960919 Mon Sep 17 00:00:00 2001 From: "Sergey \"Shnatsel\" Davidoff" Date: Mon, 18 Jan 2021 20:51:26 +0100 Subject: [PATCH 2/2] apply review changes --- crates/lazy-init/RUSTSEC-0000-0000.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/lazy-init/RUSTSEC-0000-0000.md b/crates/lazy-init/RUSTSEC-0000-0000.md index 8f72fa1..1f09032 100644 --- a/crates/lazy-init/RUSTSEC-0000-0000.md +++ b/crates/lazy-init/RUSTSEC-0000-0000.md @@ -3,7 +3,7 @@ id = "RUSTSEC-0000-0000" package = "lazy-init" date = "2021-01-17" -informational = "unsound" +categories = ["memory-corruption"] url = "https://github.com/khuey/lazy-init/issues/9" [versions]