mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-01-23 11:49:05 +01:00
Merge pull request #650 from JOE1994/0038-parc
`LockWeak<T>` allows to create data race to `T`
This commit is contained in:
17
crates/parc/RUSTSEC-0000-0000.md
Normal file
17
crates/parc/RUSTSEC-0000-0000.md
Normal file
@@ -0,0 +1,17 @@
|
||||
```toml
|
||||
[advisory]
|
||||
id = "RUSTSEC-0000-0000"
|
||||
package = "parc"
|
||||
date = "2020-11-14"
|
||||
url = "https://github.com/hyyking/rustracts/pull/6"
|
||||
categories = ["memory-corruption"]
|
||||
|
||||
[versions]
|
||||
patched = []
|
||||
```
|
||||
|
||||
# `LockWeak<T>` allows to create data race to `T`.
|
||||
|
||||
In the affected versions of this crate, `LockWeak<T>` unconditionally implemented `Send` with no trait bounds on `T`. `LockWeak<T>` doesn't own `T` and only provides `&T`.
|
||||
|
||||
This allows concurrent access to a non-Sync `T`, which can cause undefined behavior like data races.
|
||||
Reference in New Issue
Block a user