3 matches found
Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics
Consumer::skip and Consumer::clear are not panic-safe. They drop the consumed elements in place and only afterwards call advancereadindex to move the ring buffer's read index past them. If an element's Drop panics mid-loop, advancereadindex is never reached, so the read index still points at the...
RUSTSEC-2026-0293 Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics
Consumer::skip and Consumer::clear are not panic-safe. They drop the consumed elements in place and only afterwards call advancereadindex to move the ring buffer's read index past them. If an element's Drop panics mid-loop, advancereadindex is never reached, so the read index still points at the...
PT-2026-105964
Consumer::skip and Consumer::clear are not panic-safe. They drop the consumed elements in place and only afterwards call advance read index to move the ring buffer's read index past them. If an element's Drop panics mid-loop, advance read index is never reached, so the read index still points at...