Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2025/04/07 9:12 p.m.9 views

Tokio broadcast channel calls clone in parallel, but does not require `Sync`

The broadcast channel internally calls clone on the stored value when receiving it, and only requires T:Send. This means that using the broadcast channel with values that are Send but not Sync can trigger unsoundness if the clone implementation makes use of the value being !Sync. Thank you to...

6.8AI score
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.1 views

PT-2025-15909 · Crates.Io · Tokio

The broadcast channel internally calls clone on the stored value when receiving it, and only requires T:Send. This means that using the broadcast channel with values that are Send but not Sync can trigger unsoundness if the clone implementation makes use of the value being !Sync. Thank you to...

6.9AI score
Exploits0References4
RustSec
RustSec
added 2020/11/02 12:0 p.m.16 views

Use-after-free when cloning a partially consumed `Vec` iterator

The IntoIter Clone implementation clones the whole underlying Vec. If the iterator is partially consumed the consumed items will be copied, thus creating a use-after-free access. A proof of concept is available in the original bug report...

7.5CVSS2.3AI score0.00403EPSS
Exploits1Affected Software1
OSV
OSV
added 2020/11/02 12:0 p.m.15 views

RUSTSEC-2020-0145 Use-after-free when cloning a partially consumed `Vec` iterator

The IntoIter Clone implementation clones the whole underlying Vec. If the iterator is partially consumed the consumed items will be copied, thus creating a use-after-free access. A proof of concept is available in the original bug report...

7.5CVSS7.4AI score0.00403EPSS
Exploits1References3
Rows per page
Query Builder