From 834ec15bd5878a1fc4268a68d20dbf83e49545e1 Mon Sep 17 00:00:00 2001 From: Ammar Askar Date: Tue, 30 Mar 2021 09:51:34 -0700 Subject: [PATCH] Add advisory for data race in max7301 --- crates/max7301/RUSTSEC-0000-0000.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 crates/max7301/RUSTSEC-0000-0000.md diff --git a/crates/max7301/RUSTSEC-0000-0000.md b/crates/max7301/RUSTSEC-0000-0000.md new file mode 100644 index 000000000..9c2b13ffd --- /dev/null +++ b/crates/max7301/RUSTSEC-0000-0000.md @@ -0,0 +1,22 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "max7301" +date = "2020-12-18" +url = "https://github.com/edarc/max7301/issues/1" +categories = ["memory-corruption"] +keywords = ["concurrency"] + +[versions] +patched = [] +``` + +# ImmediateIO and TransactionalIO can cause data races + +The `ImmediateIO` and `TransactionalIO` types implement `Sync` for all contained +`Expander` types regardless of if the `Expander` itself is safe to use +across threads. + +As the `IO` types allow retrieving the `Expander`, this can lead to non-thread +safe types being sent across threads as part of the `Expander` leading to data +races.