~ / search / GHSA-686h-j8r8-wmfm

GHSA-686h-j8r8-wmfm

Data races in rcu_cell

Source: GitHub Advisory Database (reviewed) High CVE-2020-36451

Packages

EcosystemPackageAffectedFixed in
crates.io rcu_cell < 0.1.9 0.1.9

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate unconditionally implement Send/Sync for `RcuCell<T>`. This allows users to send `T: !Send` to other threads (while `T` enclosed within `RcuCell<T>`), and allows users to concurrently access `T: !Sync` by using the APIs of `RcuCell<T>` that provide access to `&T`. This can result in memory corruption caused by data races.

References

External links from the advisory. They lead to third-party sites.