GitHub Advisoryadvisory · crates.io
GHSA-x4mq-m75f-mx8m Delegate functions are missing `Send` bound
CRITICAL
Official page ↗
- Ecosystem
- crates.io
- Packages
- windows
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-820
- Reviewed
- 2022-06-17
Affected packages
• crates.io windows: >= 0.1.2, < 0.32.0 → fixed in 0.32.0
Description
Affected versions of this crate did not require event handlers to have `Send` bound despite there being no guarantee of them being called on any particular thread, which can potentially lead to data races and undefined behavior.
The flaw was corrected in commit afe3252 by adding `Send` bounds.
Related
Weakness · CWE (1)
- CWE-820 Missing Synchronization weakness