Skip to content

Commit af76d44

Browse files
authored
Clarify that RUSTSEC-2020-0071 is about time setting env vars (#1977)
Fixes #1976.
1 parent 5b8417e commit af76d44

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

crates/time/RUSTSEC-2020-0071.md

+5-4
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ unaffected = ["=0.2.0", "=0.2.1", "=0.2.2", "=0.2.3", "=0.2.4", "=0.2.5", "=0.2.
4242

4343
### Impact
4444

45-
Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library.
45+
The affected functions set environment variables without synchronization. On Unix-like operating systems, this can crash in multithreaded programs. Programs may segfault due to dereferencing a dangling pointer if an environment variable is read in a different thread than the affected functions. This may occur without the user's knowledge, notably in the Rust standard library or third-party libraries.
4646

4747
The affected functions from time 0.2.7 through 0.2.22 are:
4848

@@ -55,9 +55,10 @@ The affected functions from time 0.2.7 through 0.2.22 are:
5555

5656
The affected functions in time 0.1 (all versions) are:
5757

58-
- `at`
59-
- `at_utc`
60-
- `now`
58+
- `time::at_utc`
59+
- `time::at`
60+
- `time::now`
61+
- `time::tzset`
6162

6263
Non-Unix targets (including Windows and wasm) are unaffected.
6364

0 commit comments

Comments
 (0)