Files
advisory-db/crates/parc/RUSTSEC-2020-0134.md
2021-01-30 23:02:50 -05:00

541 B

[advisory]
id = "RUSTSEC-2020-0134"
package = "parc"
date = "2020-11-14"
url = "https://github.com/hyyking/rustracts/pull/6"
categories = ["memory-corruption", "thread-safety"]

[versions]
patched = []

LockWeak<T> allows to create data race to T.

In the affected versions of this crate, LockWeak<T> unconditionally implemented Send with no trait bounds on T. LockWeak<T> doesn't own T and only provides &T.

This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races.