PT-2021-24395

تاريخ النشر

2021-08-25

·

تاريخ التحديث

2021-08-25

الوصف من

الدرجة
N/A
غير متوفر

لا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.

Name of the Vulnerable Software and Affected Versions: crate versions prior to the fix in commits 92f40b4 and 6a6c367
Description: The issue allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads, which can result in a data race and memory corruption when types that provide internal mutability without synchronization are contained within PinSlab<T> or Unordered<T, S> and accessed concurrently from multiple threads.
Recommendations: For versions prior to the fix in commits 92f40b4 and 6a6c367, update to a version that includes these commits to ensure that PinSlab<T> and Unordered<T, S> only implement Send and Sync when the type T also implements Send and Sync, respectively. As a temporary workaround, consider avoiding concurrent access to PinSlab<T> and Unordered<T, S> instances that contain non-Send or non-Sync types.
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-7MG7-M5C3-3HQJ
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾