From bcb1204ff2c868e66dc76090cecae40aa4979304 Mon Sep 17 00:00:00 2001 From: JOE1994 Date: Mon, 25 Jan 2021 17:32:07 -0500 Subject: [PATCH] Report 0036-bunch to RustSec --- crates/bunch/RUSTSEC-0000-0000.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 crates/bunch/RUSTSEC-0000-0000.md diff --git a/crates/bunch/RUSTSEC-0000-0000.md b/crates/bunch/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..87bf5b2 --- /dev/null +++ b/crates/bunch/RUSTSEC-0000-0000.md @@ -0,0 +1,18 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "bunch" +date = "2020-11-12" +url = "https://github.com/krl/bunch/issues/1" +categories = ["memory-corruption"] + +[versions] +patched = [] +``` + +# `impl Sync for Bunch` needs a Sync bound on T + +Affected versions of this crate unconditionally implements `Sync` for `Bunch`. +This allows users to insert `T: !Sync` to `Bunch`. It is possible to create a data race to a `T: !Sync` by invoking the `Bunch::get()` API (which returns `&T`) from multiple threads. + +Such data races can lead to memory corruption.