OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-05 11:10:38 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #707 from JOE1994/0065-v9

Browse Source 
v9: SyncRef's clone() and debug() allow data races
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-30 19:04:45 +01:00
committed by GitHub
parent d663790b8c 1dfb30f0d3
commit c5d9a00ed6
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
crates/v9/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "v9"
date = "2020-12-18"
url = "https://github.com/purpleposeidon/v9/issues/1"
categories = ["memory-corruption", "thread-safety"]
[versions]
patched = []
```
# SyncRef's clone() and debug() allow data races
Affected versions of this crate unconditionally implement `Sync` for `SyncRef<T>`.
This definition allows data races if `&T` is accessible through `&SyncRef`.
`SyncRef<T>` derives `Clone` and `Debug`, and the default implementations of those traits access `&T` by invoking `T::clone()` & `T::fmt()`. It is possible to create data races & undefined behavior by concurrently invoking `SyncRef<T>::clone()` or `SyncRef<T>::fmt()` from multiple threads with `T: !Sync`.