GHSA-64j8-7gp2-xjx5

Data races in try-mutex

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-35924

Packages

Ecosystem	Package	Affected	Fixed in
crates.io	try-mutex	< 0.3.0	0.3.0

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate unconditionally implemented Sync trait for TryMutex<T> type. This allows users to put non-Send T type in TryMutex and send it to another thread, which can cause a data race. The flaw was corrected in the 0.3.0 release by adding T: Send bound for the Sync trait implementation.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-35924 advisory
https://github.com/mpdn/try-mutex/issues/2 web
https://github.com/mpdn/try-mutex package
https://rustsec.org/advisories/RUSTSEC-2020-0087.html web