Commit Graph

1092 Commits

Author SHA1 Message Date
Shnatsel
c86c580d8c Assigned RUSTSEC-2020-0136 to toolshed, RUSTSEC-2021-0015 to calamine, RUSTSEC-2020-0137 to lever, RUSTSEC-2020-0138 to lexer 2021-01-30 18:22:48 +00:00
Sergey "Shnatsel" Davidoff
c005d5b38a Merge pull request #589 from ammaraskar/lever
Add advisory for data race in lever
2021-01-30 19:22:11 +01:00
Sergey "Shnatsel" Davidoff
ba36f96be6 Merge pull request #591 from ammaraskar/toolshed
Add advisory for data race in toolshed
2021-01-30 19:20:44 +01:00
Sergey "Shnatsel" Davidoff
a51e8a6dfc Merge pull request #594 from JOE1994/calamine
calamine: access unclaimed/uninitialized memory
2021-01-30 19:20:21 +01:00
Sergey "Shnatsel" Davidoff
d791cc4bc5 Merge pull request #595 from JOE1994/lexer
data race in lexer::ReaderResult<T, E>
2021-01-30 19:19:56 +01:00
Sergey "Shnatsel" Davidoff
8013cb8831 Merge pull request #713 from RustSec/assign-ids
Assigned RUSTSEC-2020-0133 to scottqueue, RUSTSEC-2020-0134 to parc, RUSTSEC-2020-0135 to slock
2021-01-30 19:17:37 +01:00
Shnatsel
e2ee9c8951 Assigned RUSTSEC-2020-0133 to scottqueue, RUSTSEC-2020-0134 to parc, RUSTSEC-2020-0135 to slock 2021-01-30 18:16:30 +00:00
Sergey "Shnatsel" Davidoff
9668bab553 Merge pull request #650 from JOE1994/0038-parc
`LockWeak<T>` allows to create data race to `T`
2021-01-30 19:16:00 +01:00
Sergey "Shnatsel" Davidoff
bf315a19e5 Merge pull request #651 from JOE1994/0043-scottqueue
scottqueue: Queue<T> should have a Send bound on its Send/Sync traits
2021-01-30 19:15:35 +01:00
Sergey "Shnatsel" Davidoff
fa635de910 Merge pull request #652 from JOE1994/0049-slock
slock: Slock<T> allows sending non-Send types across thread boundaries
2021-01-30 19:15:16 +01:00
Sergey "Shnatsel" Davidoff
dc73f9d1c7 Merge pull request #711 from RustSec/assign-ids
Assigned RUSTSEC-2020-0130 to bunch, RUSTSEC-2020-0131 to rcu_cell, RUSTSEC-2020-0132 to array-tools
2021-01-30 19:13:59 +01:00
Shnatsel
4b81ce92df Assigned RUSTSEC-2020-0130 to bunch, RUSTSEC-2020-0131 to rcu_cell, RUSTSEC-2020-0132 to array-tools 2021-01-30 18:13:16 +00:00
Sergey "Shnatsel" Davidoff
af57cca99e Merge pull request #665 from JOE1994/0083-array-tools
array-tools: `FixedCapacityDequeLike::clone()` can cause dropping uninitialized memory
2021-01-30 19:12:48 +01:00
Sergey "Shnatsel" Davidoff
672db61041 Merge pull request #691 from JOE1994/0036-bunch
bunch: Bunch<T> unconditionally implements Send/Sync, allowing data races
2021-01-30 19:11:27 +01:00
Sergey "Shnatsel" Davidoff
cef67eb321 Merge pull request #692 from JOE1994/0039-rcu_cell
rcu_cell: Send/Sync bound needed on T  for Send/Sync impl of RcuCell<T>
2021-01-30 19:11:05 +01:00
Sergey "Shnatsel" Davidoff
7a1e834f10 Merge pull request #709 from RustSec/assign-ids
Assigned RUSTSEC-2020-0124 to async-coap, RUSTSEC-2020-0125 to convec, RUSTSEC-2020-0126 to signal-simple, RUSTSEC-2020-0127 to v9, RUSTSEC-2020-0128 to cache, RUSTSEC-2020-0129 to kekbit
2021-01-30 19:07:48 +01:00
Shnatsel
d874d3d054 Assigned RUSTSEC-2020-0124 to async-coap, RUSTSEC-2020-0125 to convec, RUSTSEC-2020-0126 to signal-simple, RUSTSEC-2020-0127 to v9, RUSTSEC-2020-0128 to cache, RUSTSEC-2020-0129 to kekbit 2021-01-30 18:07:13 +00:00
Sergey "Shnatsel" Davidoff
bd29fc0d7b Merge pull request #693 from JOE1994/0057-async-coap
async-coap: ArcGuard's Send and Sync should have bounds on RC
2021-01-30 19:06:37 +01:00
Sergey "Shnatsel" Davidoff
a0c0baf2dd Merge pull request #694 from JOE1994/0044-signal-simple
signal-simple: SyncChannel<T> can send non-Send types to other threads
2021-01-30 19:06:12 +01:00
Sergey "Shnatsel" Davidoff
65da9c554e Merge pull request #704 from JOE1994/0030-cache
Cache<K>: Send/Sync impls needs trait bounds on `K`
2021-01-30 19:05:45 +01:00
Sergey "Shnatsel" Davidoff
a51d26eb1e Merge pull request #705 from JOE1994/0023-convec
convec::ConVec<T> unconditionally implements Send/Sync
2021-01-30 19:05:27 +01:00
Sergey "Shnatsel" Davidoff
c73804f60f Merge pull request #706 from JOE1994/0066-kekbit
kekbit: ShmWriter allows sending non-Send type across threads
2021-01-30 19:05:02 +01:00
Sergey "Shnatsel" Davidoff
c5d9a00ed6 Merge pull request #707 from JOE1994/0065-v9
v9: SyncRef's clone() and debug() allow data races
2021-01-30 19:04:45 +01:00
JOE1994
1dfb30f0d3 Report 0065-v9 to RustSec 2021-01-27 12:26:52 -05:00
JOE1994
1446b62471 Report 0066-kekbit to RustSec 2021-01-27 12:11:22 -05:00
JOE1994
b43a461988 Report 0023-convec to RustSec 2021-01-27 11:59:47 -05:00
JOE1994
913a847d34 Report 0030-cache to RustSec 2021-01-27 11:48:06 -05:00
Sergey "Shnatsel" Davidoff
d663790b8c Merge pull request #703 from RustSec/assign-ids
Assigned RUSTSEC-2020-0123 to libp2p-deflate
2021-01-27 17:06:14 +01:00
Shnatsel
01c694c922 Assigned RUSTSEC-2020-0123 to libp2p-deflate 2021-01-27 16:03:41 +00:00
Sergey "Shnatsel" Davidoff
10062201a1 Merge pull request #700 from JOE1994/0110-libp2p-deflate
libp2p-deflate: Undefined data exposed in DeflateOutput's AsyncRead implementation
2021-01-27 17:03:04 +01:00
Sergey "Shnatsel" Davidoff
f48660ee6c Merge pull request #701 from RustSec/assign-ids
Assigned RUSTSEC-2021-0014 to marc
2021-01-27 17:02:57 +01:00
Sergey "Shnatsel" Davidoff
0788bf440f reword title 2021-01-27 17:02:15 +01:00
Shnatsel
4ee140687f Assigned RUSTSEC-2021-0014 to marc 2021-01-27 16:01:52 +00:00
Sergey "Shnatsel" Davidoff
5f1f4ed3c2 Merge pull request #699 from JOE1994/0113-marc
marc: Record::read : Custom `Read` on uninitialized buffer may cause UB
2021-01-27 17:01:14 +01:00
JOE1994
868651a1c2 Report 0110-libp2p-deflate to RustSec 2021-01-27 10:46:49 -05:00
JOE1994
8c9978e15d Report 0113-marc to RustSec 2021-01-27 10:31:15 -05:00
github-actions[bot]
39a88f9c63 Assigned RUSTSEC-2020-0122 to beef (#697)
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
2021-01-26 20:24:29 -05:00
Youngsuk Kim
8f6dc8608a beef: beef::Cow lacks a Sync bound on its Send trait allowing for data races (#696) 2021-01-26 17:21:19 -08:00
Tony Arcieri
049df72e54 Bump rustsec-admin to v0.3.4 (#695) 2021-01-26 12:50:49 -08:00
JOE1994
bebdf453ee Report 0044-signal-simple to RustSec 2021-01-26 11:51:37 -05:00
JOE1994
064d4a4c6f Report 0057-async-coap to RustSec 2021-01-25 18:02:41 -05:00
JOE1994
9b16ec3e59 Report 0039-rcu_cell to RustSec 2021-01-25 17:49:23 -05:00
Youngsuk Kim
ef367f1766 update description for issue in 'bunch' crate 2021-01-25 17:39:13 -05:00
JOE1994
bcb1204ff2 Report 0036-bunch to RustSec 2021-01-25 17:32:07 -05:00
Sergey "Shnatsel" Davidoff
773a35e313 Merge pull request #689 from RustSec/assign-ids
Assigned RUSTSEC-2020-0121 to abox
2021-01-25 18:22:34 +01:00
Shnatsel
b24162aeec Assigned RUSTSEC-2020-0121 to abox 2021-01-25 17:21:38 +00:00
Sergey "Shnatsel" Davidoff
9fffafaa84 Merge pull request #688 from JOE1994/0031-abox
abox: AtomicBox<T> implements Send/Sync for any `T: Sized`
2021-01-25 18:21:02 +01:00
JOE1994
d88f06e253 Report 0031-abox to RustSec 2021-01-25 10:44:44 -05:00
Sergey "Shnatsel" Davidoff
2f59446902 Merge pull request #686 from RustSec/assign-ids
Assigned RUSTSEC-2020-0120 to libsbc
2021-01-25 15:42:26 +01:00
Shnatsel
3880134a54 Assigned RUSTSEC-2020-0120 to libsbc 2021-01-25 14:41:19 +00:00