Lucene search

K
rustsecRustsecRUSTSEC-2018-0009
HistoryDec 09, 2018 - 12:00 p.m.

MsQueue and SegQueue suffer from double-free

2018-12-0912:00:00
rustsec.org
8

0.002 Low

EPSS

Percentile

60.7%

Even if an element is popped from a queue, crossbeam would run its
destructor inside the epoch-based garbage collector. This is a source
of double frees.

The flaw was corrected by wrapping elements inside queues in a
ManuallyDrop.

Thanks to @c0gent for reporting the issue.

CPENameOperatorVersion
crossbeamge0.4.0
crossbeamlt0.4.1

0.002 Low

EPSS

Percentile

60.7%