From 99758fa15832b13ea582bc5fe71464394fc6f542 Mon Sep 17 00:00:00 2001 From: David Knaack Date: Mon, 25 Jan 2021 13:28:21 +0100 Subject: [PATCH] Add patched version for RUSTSEC-2020-0100 --- crates/sys-info/RUSTSEC-2020-0100.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/crates/sys-info/RUSTSEC-2020-0100.md b/crates/sys-info/RUSTSEC-2020-0100.md index 05400c1..18e7f12 100644 --- a/crates/sys-info/RUSTSEC-2020-0100.md +++ b/crates/sys-info/RUSTSEC-2020-0100.md @@ -8,7 +8,7 @@ categories = ["memory-corruption"] keywords = ["concurrency", "double free"] [versions] -patched = [] +patched = [">= 0.8.0"] unaffected = [] [affected] @@ -23,5 +23,7 @@ Affected versions of `sys-info` use a static, global, list to store temporary di This results in consistent double-frees and segfaults when calling `sys_info::disk_info` from multiple threads at once. +The issue was fixed by moving the global variable into a local scope. + ## Safer Alternatives: - [`sysinfo`](https://crates.io/crates/sysinfo)