mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-01-03 10:05:26 +01:00
Add advisory for multiple issues in cgc
This commit is contained in:
25
crates/cgc/RUSTSEC-0000-0000.md
Normal file
25
crates/cgc/RUSTSEC-0000-0000.md
Normal file
@@ -0,0 +1,25 @@
|
||||
```toml
|
||||
[advisory]
|
||||
id = "RUSTSEC-0000-0000"
|
||||
package = "cgc"
|
||||
date = "2020-12-10"
|
||||
url = "https://github.com/playXE/cgc/issues/5"
|
||||
categories = ["memory-corruption"]
|
||||
keywords = ["memory-safety", "aliasing", "concurrency"]
|
||||
|
||||
[versions]
|
||||
patched = []
|
||||
```
|
||||
|
||||
# Multiple soundness issues in `Ptr`
|
||||
|
||||
Affected versions of this crate have the following issues:
|
||||
|
||||
1. `Ptr` implements `Send` and `Sync` for all types, this can lead to data
|
||||
races by sending non-thread safe types across threads.
|
||||
|
||||
2. `Ptr::get` violates mutable alias rules by returning multiple mutable
|
||||
references to the same object.
|
||||
|
||||
3. `Ptr::write` uses non-atomic writes to the underlying pointer. This means
|
||||
that when used across threads it can lead to data races.
|
||||
Reference in New Issue
Block a user