Lucene search

K
rustsecRustsecRUSTSEC-2020-0062
HistoryJan 24, 2020 - 12:00 p.m.

Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption

2020-01-2412:00:00
rustsec.org
8

0.0004 Low

EPSS

Percentile

12.6%

Affected versions of the crate had an unsound Sync implementation on the FuturesUnordered structure, which used a Cell for
interior mutability without any code to handle synchronized access to the underlying task list’s length and head safely.

This could of lead to data corruption since two threads modifying the list at once could see incorrect values due to the lack
of access synchronization.

The issue was fixed by adding access synchronization code around insertion of tasks into the list.

CPENameOperatorVersion
futures-utilge0.3.0
futures-utillt0.3.2

0.0004 Low

EPSS

Percentile

12.6%

Related for RUSTSEC-2020-0062