~ / search / GHSA-mxv6-q98x-h958

GHSA-mxv6-q98x-h958

Data races in model

Source: GitHub Advisory Database (reviewed) High CVE-2020-36460

Packages

EcosystemPackageAffectedFixed in
crates.io model <= 0.1.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

`Shared` data structure in `model` crate implements `Send` and `Sync` traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat `Shared` as an unsafe type. It should not be used outside of the testing context, and care must be taken so that the testing code does not have a data race besides a race condition that is expected to be caught by the test.

References

External links from the advisory. They lead to third-party sites.