diff --git a/crates/lever/RUSTSEC-0000-0000.md b/crates/lever/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..6c15ad8 --- /dev/null +++ b/crates/lever/RUSTSEC-0000-0000.md @@ -0,0 +1,21 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "lever" +date = "2020-11-10" +url = "https://github.com/vertexclique/lever/issues/15" +categories = ["memory-corruption"] +keywords = ["concurrency"] + +[versions] +patched = [] +``` + +# AtomicBox lacks bound on its Send and Sync traits allowing data races + +`AtomicBox` is a `Box` type designed to be used across threads, however, it +implements the `Send` and `Sync` traits for all types `T`. + +This allows non-Send types such as `Rc` and non-Sync types such as `Cell` to +be used across thread boundaries which can trigger undefined behavior and +memory corruption.