Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0113
HistoryOct 31, 2020 - 12:00 p.m.

AtomicOption should have Send + Sync bound on its type argument.

2020-10-3112:00:00
Google
osv.dev
9
atomicoption
send
sync
non-sync types
thread boundaries
data races
undefined behavior

EPSS

0.001

Percentile

46.4%

In the affected versions of this crate,
AtomicOption<T> unconditionally implements Sync.

This allows programmers to move non-Sync types across thread boundaries (e.g. Rc<T>, Arc<Cell<T>>), which can lead to data races and undefined behavior.
It is also possible to send non-Send types like std::sync::MutexGuard to other threads, which can lead to undefined behavior.

EPSS

0.001

Percentile

46.4%

Related for OSV:RUSTSEC-2020-0113