Lucene search

K
rustsecRustsecRUSTSEC-2020-0130
HistoryNov 12, 2020 - 12:00 p.m.

Bunch<T> unconditionally implements Send/Sync

2020-11-1212:00:00
rustsec.org
10

0.002 Low

EPSS

Percentile

59.3%

Affected versions of this crate unconditionally implements Send/Sync for Bunch&lt;T&gt;.
This allows users to insert T: !Sync to Bunch&lt;T&gt;. It is possible to create a data race to a T: !Sync by invoking the Bunch::get() API (which returns &T) from multiple threads. It is also possible to send T: !Send to other threads by inserting T inside Bunch&lt;T&gt; and sending Bunch&lt;T&gt; to another thread, allowing to create a data race by inserting types like T = Rc&lt;_&gt;.

Such data races can lead to memory corruption.

CPENameOperatorVersion
buncheqany

0.002 Low

EPSS

Percentile

59.3%

Related for RUSTSEC-2020-0130