diff --git a/crates/parc/RUSTSEC-0000-0000.md b/crates/parc/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..de40e4c --- /dev/null +++ b/crates/parc/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "parc" +date = "2020-11-14" +url = "https://github.com/hyyking/rustracts/pull/6" +categories = ["memory-corruption"] + +[versions] +patched = [] +``` + +# `LockWeak` allows to create data race to `T`. + +In the affected versions of this crate, `LockWeak` unconditionally implemented `Send` with no trait bounds on `T`. `LockWeak` doesn't own `T` and only provides `&T`. + +This allows concurrent access to a non-Sync `T`, which can cause undefined behavior like data races.