Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0130
HistoryNov 12, 2020 - 12:00 p.m.

Bunch<T> unconditionally implements Send/Sync

2020-11-1212:00:00
Google
osv.dev
3
bunch implementation
data races
memory corruption
send
sync
threads

EPSS

0.003

Percentile

69.3%

Affected versions of this crate unconditionally implements Send/Sync for Bunch&lt;T&gt;.
This allows users to insert T: !Sync to Bunch&lt;T&gt;. It is possible to create a data race to a T: !Sync by invoking the Bunch::get() API (which returns &T) from multiple threads. It is also possible to send T: !Send to other threads by inserting T inside Bunch&lt;T&gt; and sending Bunch&lt;T&gt; to another thread, allowing to create a data race by inserting types like T = Rc&lt;_&gt;.

Such data races can lead to memory corruption.

EPSS

0.003

Percentile

69.3%

Related for OSV:RUSTSEC-2020-0130