GHSA-wv4p-jp67-jr97

Data races in magnetic

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-35925

Packages

Ecosystem	Package	Affected	Fixed in
crates.io	magnetic	< 2.0.1	2.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T: Send bound to affected Sync/Send trait implementations.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-35925 advisory
https://github.com/johnshaw/magnetic/issues/9 web
https://github.com/johnshaw/magnetic package
https://rustsec.org/advisories/RUSTSEC-2020-0088.html web