~ / search / GHSA-rpxm-vmr7-5f5f

GHSA-rpxm-vmr7-5f5f

Data races in convec

Source: GitHub Advisory Database (reviewed) High CVE-2020-36445

Packages

EcosystemPackageAffectedFixed in
crates.io convec <= 2.0.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate unconditionally implement Send/Sync for `ConVec<T>`. This allows users to insert `T` that is not Send or not Sync. This allows users to create data races by using non-Send types like `Arc<Cell<_>>` or `Rc<_>` as `T` in `ConVec<T>`. It is also possible to create data races by using types like `Cell<_>` or `RefCell<_>` as `T` (types that are `Send` but not `Sync`). Such data races can lead to memory corruption.

References

External links from the advisory. They lead to third-party sites.