Report 0050-magnetic to RustSec (#519)

This commit is contained in:
Yechan Bae
2020-12-07 12:33:32 -05:00
committed by GitHub
parent f17cd12f02
commit bd3cb8dd83

View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "magnetic"
date = "2020-11-29"
url = "https://github.com/johnshaw/magnetic/issues/9"
[versions]
patched = [">= 2.0.1"]
```
# MPMCConsumer/Producer allows sending non-Send type across threads
Affected versions of this crate unconditionally implemented `Sync` and `Send` traits for `MPMCConsumer` and `MPMCProducer` types.
This allows users to send types that do not implement `Send` trait across thread boundaries, which can cause a data race.
The flaw was corrected in the 2.0.1 release by adding `T: Send` bound to affected Sync/Send trait implementations.