GHSA-jh2g-xhqq-x4w9

Source

https://github.com/advisories/GHSA-jh2g-xhqq-x4w9

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-jh2g-xhqq-x4w9/GHSA-jh2g-xhqq-x4w9.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jh2g-xhqq-x4w9

Withdrawn

2021-08-24T17:52:52Z

Published

2021-08-25T21:00:07Z

Modified

2021-08-24T17:52:52Z

Summary

Send/Sync bound needed on T for Send/Sync impl of RcuCell<T>

Details

Affected versions of this crate unconditionally implement Send/Sync for RcuCell<T>. This allows users to send T: !Send to other threads (while T enclosed within RcuCell<T>), and allows users to concurrently access T: !Sync by using the APIs of RcuCell<T> that provide access to &T.

This can result in memory corruption caused by data races.

Database specific

{
    "cwe_ids":  [
        "CWE-362"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-08-06T20:11:31Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}

References

Affected packages

crates.io / rcu_cell

Package

Name: rcu_cell; View open source insights on deps.dev
Purl: pkg:cargo/rcu_cell

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.1.9

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-jh2g-xhqq-x4w9/GHSA-jh2g-xhqq-x4w9.json"