Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0117
HistoryNov 24, 2020 - 12:00 p.m.

QueueSender<T>/QueueReceiver<T>: Send/Sync impls need `T: Send`

2020-11-2412:00:00
Google
osv.dev
8

0.002 Low

EPSS

Percentile

61.8%

Affected versions of this crate unconditionally implemented Send/Sync for QueueSender&lt;T&gt;,
allowing to send non-Send T to other threads by invoking (&QueueSender&lt;T&gt;).send().

This fails to prevent users from creating data races by sending types like Rc&lt;T&gt; or Arc&lt;Cell&lt;T&gt;&gt; to other threads, which can lead to memory corruption.

The flaw was corrected in commit 1e462c3 by imposing T: Send to both Send/Sync impls for QueueSender&lt;T&gt;/QueueReceiver&lt;T&gt;.

CPENameOperatorVersion
conqueuelt0.4.0

0.002 Low

EPSS

Percentile

61.8%

Related for OSV:RUSTSEC-2020-0117