~ / search / GHSA-pwhf-7427-9vv2

GHSA-pwhf-7427-9vv2

Non-atomic writes in cgc

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-36468

Packages

EcosystemPackageAffectedFixed in
crates.io cgc <= 0.4.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

# Multiple soundness issues in `Ptr` in cgc Affected versions of this crate have the following issues: 1. `Ptr` implements `Send` and `Sync` for all types, this can lead to data races by sending non-thread safe types across threads. 2. `Ptr::get` violates mutable alias rules by returning multiple mutable references to the same object. 3. `Ptr::write` uses non-atomic writes to the underlying pointer. This means that when used across threads it can lead to data races.

References

External links from the advisory. They lead to third-party sites.