~ / search / GHSA-rmff-f8w9-c9rm

GHSA-rmff-f8w9-c9rm

Data races in max7301

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-36472

Packages

EcosystemPackageAffectedFixed in
crates.io max7301 < 0.2.0 0.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

The `ImmediateIO` and `TransactionalIO` types implement `Sync` for all contained `Expander<EI>` types regardless of if the `Expander` itself is safe to use across threads. As the `IO` types allow retrieving the `Expander`, this can lead to non-thread safe types being sent across threads as part of the `Expander` leading to data races.

References

External links from the advisory. They lead to third-party sites.