Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0138
HistoryNov 10, 2020 - 12:00 p.m.

ReaderResult should be bounded by Sync

2020-11-1012:00:00
Google
osv.dev
7

0.003 Low

EPSS

Percentile

65.6%

Affected versions of this crate implements Sync for ReaderResult<T, E> with the trait bound T: Send, E: Send.

Since matching on the public enum ReaderResult<T, E> provides access to &T & &E,
allowing data race to a non-Sync type T or E.
This can result in a memory corruption when multiple threads concurrently access &T or &E.

Suggested fix for the bug is change the trait bounds imposed on T & E to be T: Sync, E: Sync.

0.003 Low

EPSS

Percentile

65.6%

Related for OSV:RUSTSEC-2020-0138