From 828efa2d4e8876c91a4b14204a7ca97220b6120a Mon Sep 17 00:00:00 2001 From: Ammar Askar Date: Mon, 18 Jan 2021 21:19:45 -0800 Subject: [PATCH] Add advisory for data race in lever --- crates/lever/RUSTSEC-0000-0000.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 crates/lever/RUSTSEC-0000-0000.md diff --git a/crates/lever/RUSTSEC-0000-0000.md b/crates/lever/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..6c15ad893 --- /dev/null +++ b/crates/lever/RUSTSEC-0000-0000.md @@ -0,0 +1,21 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "lever" +date = "2020-11-10" +url = "https://github.com/vertexclique/lever/issues/15" +categories = ["memory-corruption"] +keywords = ["concurrency"] + +[versions] +patched = [] +``` + +# AtomicBox lacks bound on its Send and Sync traits allowing data races + +`AtomicBox` is a `Box` type designed to be used across threads, however, it +implements the `Send` and `Sync` traits for all types `T`. + +This allows non-Send types such as `Rc` and non-Sync types such as `Cell` to +be used across thread boundaries which can trigger undefined behavior and +memory corruption.