HistoryEdit

RUSTSEC-2022-0029

MsQueue push/pop use the wrong orderings

Issued
Package
crossbeam (crates.io)
Type
Vulnerability
Categories
Details
https://github.com/crossbeam-rs/crossbeam/pull/98
Patched
  • >=0.3.0

Description

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.