~ / search / GHSA-f3mq-99jr-ww4r

GHSA-f3mq-99jr-ww4r

Multiple soundness issues in cgc

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-36467

Packages

EcosystemPackageAffectedFixed in
crates.io cgc <= 0.4.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate have the following issues: 1. `Ptr` implements `Send` and `Sync` for all types, this can lead to data races by sending non-thread safe types across threads. 2. `Ptr::get` violates mutable alias rules by returning multiple mutable references to the same object. 3. `Ptr::write` uses non-atomic writes to the underlying pointer. This means that when used across threads it can lead to data races.

References

External links from the advisory. They lead to third-party sites.