OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-13 21:18:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
bd83e1ecc22c277f96d0ef9b677df1b8a2978c4d
advisory-db/crates/im/RUSTSEC-2020-0096.md
Shnatsel b2a7af1c9b Assigned RUSTSEC-2020-0096 to im
2021-01-18 20:56:32 +00:00

512 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0096"
package = "im"
date = "2020-11-09"
url = "https://github.com/bodil/im-rs/issues/157"
informational = "unsound"

[versions]
patched = []
unaffected = ["< 12.0.0"]

TreeFocus lacks bounds on its Send and Sync traits

Affected versions of im contains TreeFocus that unconditionally implements Send and Sync.

This allows a data race in safe Rust code if TreeFocus is extracted from Focus type. Typical users that only use Focus type are not affected.