GHSA-3jc5-5hc5-33gj
Data races in conquer-once
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| crates.io | conquer-once | < 0.3.2 | 0.3.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
Affected versions of conquer-once implements Sync for its OnceCell type without restricting it to Sendable types.
This allows non-Send but Sync types such as MutexGuard to be sent across threads leading to undefined behavior and memory corruption in concurrent programs.
The issue was fixed by adding a Send constraint to OnceCell.
References
External links from the advisory. They lead to third-party sites.