GitHub Advisoryadvisory · crates.io

GHSA-rwf4-gx62-rqfw `MsQueue` `push`/`pop` use the wrong orderings

MEDIUM Published 2022-06-08 Modified 2022-06-08 Official page ↗

Ecosystem: crates.io
Packages: crossbeam
Severity: Moderate
Reviewed: 2022-06-08

Affected packages

• crates.io crossbeam: < 0.3.0 → fixed in 0.3.0

Description

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: .

References

https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919 web
https://github.com/crossbeam-rs/crossbeam/pull/98 web
https://github.com/crossbeam-rs/crossbeam package
https://rustsec.org/advisories/RUSTSEC-2022-0029.html web