Affected versions of the crate did not properly implement a 'static
lifetime bound on the waker
function.
This resulted in a use-after-free if Waker::wake()
is called after original data had been dropped.
The flaw was corrected by adding 'static
lifetime bound to the data waker
takes.
CPE | Name | Operator | Version |
---|---|---|---|
futures-task | ge | 0.2.2-0 | |
futures-task | lt | 0.3.6 |