Issued

December 9, 2020

Package

dces (crates.io)

Type

Vulnerability

Categories

• memory-corruption
• thread-safety

Details

https://gitlab.redox-os.org/redox-os/dces-rust/-/issues/8

Patched

no patched versions

Keywords

• concurrency

Description

The World type in dces is marked as Send without bounds on its EntityStore and ComponentStore.

This allows non-thread safe EntityStore and ComponentStores to be sent across threads and cause data races.

More

• Advisory History
• Edit Advisory