Merge pull request #650 from JOE1994/0038-parc

`LockWeak<T>` allows to create data race to `T`
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-30 19:16:00 +01:00
committed by GitHub

View File

@@ -0,0 +1,17 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "parc"
date = "2020-11-14"
url = "https://github.com/hyyking/rustracts/pull/6"
categories = ["memory-corruption"]
[versions]
patched = []
```
# `LockWeak<T>` allows to create data race to `T`.
In the affected versions of this crate, `LockWeak<T>` unconditionally implemented `Send` with no trait bounds on `T`. `LockWeak<T>` doesn't own `T` and only provides `&T`.
This allows concurrent access to a non-Sync `T`, which can cause undefined behavior like data races.