CVE-2020-36214

An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust. Because a non-Send type can be sent to a different thread, a data race can occur.

RUSTSEC-2020-0106 — Queues allow non-Send types to be sent to other threads, allowing data races

Affected: crates.io: multiqueue2

Affected versions of this crate unconditionally implemented `Send` for types used in queue implementations (`InnerSend<RW, T>`, `InnerRecv<RW, T>`, `FutInnerSend<RW, T>`, `FutInnerRecv<RW, T>`).

This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior.

The flaw was corrected in v0.1.7 by adding `T: Send` bound to to the `Send` impl of four data types explained above.

Most recent entries from all

CVE-2020-36214

RUSTSEC-2020-0106 — Queues allow non-Send types to be sent to other threads, allowing data races