GHSA-8Q64-WRFR-Q48C中危已审查已撤回

Data races in model

OSV 1.4.0 · github-reviewed · 修改于 2021-08-25 01:59

发布时间

2021-08-26 04:59

GitHub 审查时间

2021-08-10 01:22

NVD 发布时间

—

源文件

advisories/github-reviewed/2021/08/GHSA-8q64-wrfr-q48c/GHSA-8q64-wrfr-q48c.json

该公告已于 2021-08-25 01:59 撤回

内容仅用于保留外部引用，请不要将其当作仍然有效的安全结论。

公告说明

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust.

Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and care must be taken so that the testing code does not have a data race besides a race condition that is expected to be caught by the test.

Check the Rustonomicon for the difference between a data race and a general race condition.

受影响的软件包

crates.io

model

ECOSYSTEM

标识信息

别名 / CVE

无

CWE

CWE-362

软件生态

crates.io

扩展资料

暂无扩展资料。

CVSS 评分

没有 CVSS 数据。

原始 OSV JSON

{
  "id": "GHSA-8q64-wrfr-q48c",
  "aliases": [],
  "details": "`Shared` data structure in `model` crate implements `Send` and `Sync` traits regardless of the inner type.\nThis allows safe Rust code to trigger a data race, which is undefined behavior in Rust.\n\nUsers are advised to treat `Shared` as an unsafe type.\nIt should not be used outside of the testing context,\nand care must be taken so that the testing code does not have a data race\nbesides a race condition that is expected to be caught by the test.\n\nCheck [the Rustonomicon](https://doc.rust-lang.org/nomicon/races.html) for the difference between\na data race and a general race condition.\n",
  "summary": "Data races in model",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "0.1.2"
            }
          ]
        }
      ],
      "package": {
        "name": "model",
        "ecosystem": "crates.io"
      }
    }
  ],
  "modified": "2021-08-24T17:59:47Z",
  "severity": [],
  "published": "2021-08-25T20:59:24Z",
  "withdrawn": "2021-08-24T17:59:47Z",
  "references": [
    {
      "url": "https://github.com/spacejam/model/issues/3",
      "type": "WEB"
    },
    {
      "url": "https://github.com/spacejam/model",
      "type": "PACKAGE"
    },
    {
      "url": "https://rustsec.org/advisories/RUSTSEC-2020-0140.html",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-362"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "nvd_published_at": null,
    "github_reviewed_at": "2021-08-09T17:22:47Z"
  }
}