Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0114
HistoryDec 22, 2020 - 12:00 p.m.

`Demuxer` can carry non-Send types across thread boundaries

2020-12-2212:00:00
Google
osv.dev
10
demuxer
send
thread boundaries
undefined behavior
data race
commit 0562cbf

EPSS

0.002

Percentile

52.9%

In the affected versions of this crate, Demuxer<T> unconditionally implemented Send with no trait bounds on T.

This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn’t lock the mutex, or memory corruption from data race.

The flaw was corrected in commit 0562cbf by adding a T: Send bound to the Send impl for Demuxer<T>.

EPSS

0.002

Percentile

52.9%

Related for OSV:RUSTSEC-2020-0114