GitHub Advisoryadvisory · crates.io

GHSA-9hpw-r23r-xgm5 Data race in `Iter` and `IterMut`

HIGH Published 2022-06-17 Modified 2022-06-17 Official page ↗
Ecosystem
crates.io
Packages
thread_local
Severity
High
Weaknesses
CWE-362
Reviewed
2022-06-17

Affected packages

• crates.io thread_local: < 1.1.4 → fixed in 1.1.4

Description

In the affected version of this crate, `{Iter, IterMut}::next` used a weaker memory ordering when loading values than what was required, exposing a potential data race when iterating over a `ThreadLocal`'s values. Crates using `Iter::next`, or `IterMut::next` are affected by this issue.

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References