Merge pull request #610 from JOE1994/0056-gfwx

gfwx: ImageChunkMut needs bounds on its Send and Sync traits
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-20 20:06:16 +01:00
committed by GitHub

View File

@@ -0,0 +1,19 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "gfwx"
date = "2020-12-08"
url = "https://github.com/Devolutions/gfwx-rs/issues/7"
categories = ["memory-corruption"]
[versions]
patched = [">= 0.3.0"]
```
# ImageChunkMut needs bounds on its Send and Sync traits
In the affected versions of this crate, `ImageChunkMut<'_, T>` unconditionally implements `Send` and `Sync`, allowing to create data races.
This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries.
The flaw was corrected in commit e7fb2f5 by adding `T: Send` bound to the `Send` impl and adding `T: Sync` bound to the `Sync` impl.