OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-15 22:04:38 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
2e4cdf36d0955f8f2c5288c0175dfcec93eac859
advisory-db/crates/max7301/RUSTSEC-2020-0152.md
Kyle Schaffrick 66a13ee850 max7301: Mark RUSTSEC-2020-0152 as patched. (#859)
2021-03-30 17:58:17 -04:00

630 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0152"
package = "max7301"
date = "2020-12-18"
url = "https://github.com/edarc/max7301/issues/1"
categories = ["memory-corruption"]
keywords = ["concurrency"]

[versions]
patched = [">= 0.2.0"]

ImmediateIO and TransactionalIO can cause data races

The ImmediateIO and TransactionalIO types implement Sync for all contained Expander<EI> types regardless of if the Expander itself is safe to use across threads.

As the IO types allow retrieving the Expander, this can lead to non-thread safe types being sent across threads as part of the Expander leading to data races.