Add advisory for data race in max7301

This commit is contained in:
Ammar Askar
2021-03-30 09:51:34 -07:00
parent ca8a60b7be
commit 834ec15bd5

View File

@@ -0,0 +1,22 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "max7301"
date = "2020-12-18"
url = "https://github.com/edarc/max7301/issues/1"
categories = ["memory-corruption"]
keywords = ["concurrency"]
[versions]
patched = []
```
# ImmediateIO and TransactionalIO can cause data races
The `ImmediateIO` and `TransactionalIO` types implement `Sync` for all contained
`Expander<EI>` types regardless of if the `Expander` itself is safe to use
across threads.
As the `IO` types allow retrieving the `Expander`, this can lead to non-thread
safe types being sent across threads as part of the `Expander` leading to data
races.