Lucene search

K
osvGoogleOSV:RUSTSEC-2018-0009
HistoryDec 09, 2018 - 12:00 p.m.

MsQueue and SegQueue suffer from double-free

2018-12-0912:00:00
Google
osv.dev
7

0.002 Low

EPSS

Percentile

60.7%

Even if an element is popped from a queue, crossbeam would run its
destructor inside the epoch-based garbage collector. This is a source
of double frees.

The flaw was corrected by wrapping elements inside queues in a
ManuallyDrop.

Thanks to @c0gent for reporting the issue.

CPENameOperatorVersion
crossbeamlt0.4.1
crossbeamge0.4.0

0.002 Low

EPSS

Percentile

60.7%