VDB
Sign up
MEDIUM5.9

GHSA-f3mq-99jr-ww4r

Multiple soundness issues in cgc

Details

Affected versions of this crate have the following issues:

1. `Ptr` implements `Send` and `Sync` for all types, this can lead to data races by sending non-thread safe types across threads.

2. `Ptr::get` violates mutable alias rules by returning multiple mutable references to the same object.

3. `Ptr::write` uses non-atomic writes to the underlying pointer. This means that when used across threads it can lead to data races.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/cgc
Introduced in: 0

No fixed version published yet for cgc. Pin to a known-safe version or switch to an alternative.

References