Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump crossbeam-deque from 0.8.0 to 0.8.1 #2962

Merged

Conversation

yangby-cryptape
Copy link
Collaborator

What problem does this PR solve?

Fix RUSTSEC-2021-0093.

Problem Summary:

In the affected version of this crate, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this can cause double free and a memory leak. If not, this still can cause a logical bug.

Crates using Stealer::steal, Stealer::steal_batch, or Stealer::steal_batch_and_pop are affected by this issue.

Release note

None: Exclude this PR from the release note.

@driftluo
Copy link
Collaborator

bors r=driftluo,zhangsoledad

@bors
Copy link
Contributor

bors bot commented Aug 23, 2021

Build succeeded:

@bors bors bot merged commit adce2ba into nervosnetwork:develop Aug 23, 2021
@yangby-cryptape yangby-cryptape deleted the pr/cargo/crossbeam-deque-0.8.1 branch August 27, 2021 02:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants