Lucene search

K
osvGoogleOSV:GHSA-GQ4H-F254-7CW9
HistoryAug 25, 2021 - 9:00 p.m.

Data races in ticketed_lock

2021-08-2521:00:34
Google
osv.dev
14
data races
ticketed_lock
send
readticket
writeticket
memory corruption
undefined behavior
internal mutability
thread
software

EPSS

0.002

Percentile

61.8%

Affected versions of this crate unconditionally implemented Send for ReadTicket<T> & WriteTicket<T>.
This allows to send non-Send T to other threads.

This can allows creating data races by cloning types with internal mutability and sending them to other threads (as T of ReadTicket<T>/WriteTicket<T>). Such data races can cause memory corruption or other undefined behavior.

The flaw was corrected in commit a986a93 by adding T: Send bounds to Send impls of ReadTicket<T>/WriteTicket<T>.

EPSS

0.002

Percentile

61.8%

Related for OSV:GHSA-GQ4H-F254-7CW9