~ / search / GHSA-rw2c-c256-3r53

GHSA-rw2c-c256-3r53

Data races in hashconsing

Source: GitHub Advisory Database (reviewed) High CVE-2020-36215

Packages

EcosystemPackageAffectedFixed in
crates.io hashconsing < 1.1.0 1.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of hashconsing implements Send/Sync for its HConsed type without restricting it to Sendable types and Syncable types. This allows non-Sync types such as Cell to be shared across threads leading to undefined behavior and memory corruption in concurrent programs.

References

External links from the advisory. They lead to third-party sites.