Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2020-0151: Generators can cause data races if non-Send types are used in their generator functions #274

Open
github-actions bot opened this issue Mar 31, 2021 · 0 comments

Comments

@github-actions
Copy link

Generators can cause data races if non-Send types are used in their generator functions

Details
Package generator
Version 0.6.25
URL Xudong-Huang/generator-rs#27
Date 2020-11-16
Patched versions >=0.7.0

The Generator type is an iterable which uses a generator function that yields
values. In affected versions of the crate, the provided function yielding values
had no Send bounds despite the Generator itself implementing Send.

The generator function lacking a Send bound means that types that are
dangerous to send across threads such as Rc could be sent as part of a
generator, potentially leading to data races.

This flaw was fixed in commit f7d120a3b
by enforcing that the generator function be bound by Send.

See advisory page for additional details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

0 participants