Merge pull request #650 from JOE1994/0038-parc

`LockWeak<T>` allows to create data race to `T`
rustsec · Jan 30, 2021 · 9668bab · 9668bab
2 parents bf315a1 + 9187156
commit 9668bab
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/crates/parc/RUSTSEC-0000-0000.md b/crates/parc/RUSTSEC-0000-0000.md
@@ -0,0 +1,17 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "parc"
+date = "2020-11-14"
+url = "https://github.com/hyyking/rustracts/pull/6"
+categories = ["memory-corruption"]
+
+[versions]
+patched = []
+```
+
+# `LockWeak<T>` allows to create data race to `T`.
+
+In the affected versions of this crate, `LockWeak<T>` unconditionally implemented `Send` with no trait bounds on `T`. `LockWeak<T>` doesn't own `T` and only provides `&T`.
+
+This allows concurrent access to a non-Sync `T`, which can cause undefined behavior like data races.