Lucene search

K
rustsecRustsecRUSTSEC-2020-0101
HistoryDec 22, 2020 - 12:00 p.m.

conquer-once's OnceCell lacks Send bound for its Sync trait.

2020-12-2212:00:00
rustsec.org
7

0.001 Low

EPSS

Percentile

20.2%

Affected versions of conquer-once implements Sync for its OnceCell type
without restricting it to Sendable types.

This allows non-Send but Sync types such as MutexGuard to be sent across
threads leading to undefined behavior and memory corruption in concurrent
programs.

The issue was fixed by adding a Send constraint to OnceCell.

CPENameOperatorVersion
conquer-oncelt0.3.2

0.001 Low

EPSS

Percentile

20.2%

Related for RUSTSEC-2020-0101