diff --git a/crates/may_queue/RUSTSEC-0000-0000.md b/crates/may_queue/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..3f2a814 --- /dev/null +++ b/crates/may_queue/RUSTSEC-0000-0000.md @@ -0,0 +1,18 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "may_queue" +date = "2020-11-10" +url = "https://github.com/Xudong-Huang/may/issues/88" +categories = ["memory-corruption"] +keywords = ["concurrency"] + +[versions] +patched = [] +``` + +# may_queue's Queue lacks Send/Sync bound for its Send/Sync trait. + +Affected versions of `may_queue` implements `Send`/`Sync` for its `Queue` type without restricting it to `Send`able types and `Sync`able types. + +This allows non-`Sync` types such as `Cell` to be shared across threads leading to undefined behavior and memory corruption in concurrent programs.