Skip to content
This repository has been archived by the owner on Feb 6, 2024. It is now read-only.

RUSTSEC-2020-0151: Generators can cause data races if non-Send types are used in their generator functions #11

Closed
github-actions bot opened this issue Apr 26, 2021 · 0 comments

Comments

@github-actions
Copy link

Generators can cause data races if non-Send types are used in their generator functions

Details
Package generator
Version 0.6.25
URL Xudong-Huang/generator-rs#27
Date 2020-11-16
Patched versions >=0.7.0

The Generator type is an iterable which uses a generator function that yields
values. In affected versions of the crate, the provided function yielding values
had no Send bounds despite the Generator itself implementing Send.

The generator function lacking a Send bound means that types that are
dangerous to send across threads such as Rc could be sent as part of a
generator, potentially leading to data races.

This flaw was fixed in commit f7d120a3b
by enforcing that the generator function be bound by Send.

See advisory page for additional details.

@dlunch dlunch closed this as completed May 15, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant