diff --git a/crates/internment/RUSTSEC-2020-0017.md b/crates/internment/RUSTSEC-2020-0017.md index 59c9f9c..0438b44 100644 --- a/crates/internment/RUSTSEC-2020-0017.md +++ b/crates/internment/RUSTSEC-2020-0017.md @@ -11,7 +11,7 @@ url = "https://github.com/droundy/internment/issues/11" "internment::ArcIntern::drop" = [">= 0.3.12"] [versions] -patched = [] +patched = [">= 0.4.0"] unaffected = ["< 0.3.12"] ``` @@ -21,4 +21,7 @@ unaffected = ["< 0.3.12"] which is about to get another user. The new user will get a reference to freed memory. +This was fixed by serializing access to an interned object while it +is being deallocated. + Versions prior to 0.3.12 used stronger locking which avoided the problem.