From 91871568cc6d9a1a8490b565038a1a7795d4f88f Mon Sep 17 00:00:00 2001 From: JOE1994 Date: Fri, 22 Jan 2021 22:16:27 -0500 Subject: [PATCH] Report 0038-parc to RustSec --- crates/parc/RUSTSEC-0000-0000.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 crates/parc/RUSTSEC-0000-0000.md diff --git a/crates/parc/RUSTSEC-0000-0000.md b/crates/parc/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..de40e4c --- /dev/null +++ b/crates/parc/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "parc" +date = "2020-11-14" +url = "https://github.com/hyyking/rustracts/pull/6" +categories = ["memory-corruption"] + +[versions] +patched = [] +``` + +# `LockWeak` allows to create data race to `T`. + +In the affected versions of this crate, `LockWeak` unconditionally implemented `Send` with no trait bounds on `T`. `LockWeak` doesn't own `T` and only provides `&T`. + +This allows concurrent access to a non-Sync `T`, which can cause undefined behavior like data races.