RUSTSEC-2020-0099
on 2020-12-10: Aovec<T> lacks bound on its Send and Sync traits allowing data races
This crate has no reviews yet. To add a review, set up your cargo-crev
.
Crates in the crates.io registry are tarball snapshots uploaded by crates' publishers. The registry is not using crates' git repositories. There is absolutely no guarantee that the repository URL declared by the crate belongs to the crate, or that the code in the repository is the code inside the published tarball.
To review the actual code of the crate, it's best to use cargo crev open aovec
. Alternatively, you can download the tarball of aovec v1.1.0 or view the source online.
aovec::Aovec<T>
is a vector type that implementsSend
andSync
for all typesT
.This allows non-Send types such as
Rc
and non-Sync types such asCell
to be used across thread boundaries which can trigger undefined behavior and memory corruption.CVE-2020-36207
GHSA-g489-xrw3-3v8w