diff --git a/crates/crossbeam/RUSTSEC-0000-0000.toml b/crates/crossbeam/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..1d33df5 --- /dev/null +++ b/crates/crossbeam/RUSTSEC-0000-0000.toml @@ -0,0 +1,19 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "crossbeam" +date = "2018-12-09" +title = "MsQueue and SegQueue suffer from double-free" +description = """ +Even if an element is popped from a queue, crossbeam would run its +destructor inside the epoch-based garbage collector. This is a source +of double frees. + +The flaw was corrected by wrapping elements inside queues in a +`ManuallyDrop`. + +Thanks to @c0gent for reporting the issue. +""" +patched_versions = [">= 0.4.1"] +unaffected_versions = ["< 0.4.0"] +url = "https://github.com/crossbeam-rs/crossbeam-epoch/issues/82" +keywords = ["concurrency", "memory-management", "memory-corruption"]