Skip to content
OpenAdvisories

Package · crates.io

spin

2 known vulnerabilities.

2 results · Feed

  • Medium —

    spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers

    `Once::try_call_once` is unsound if invoked more than once concurrently and any call fails to initialise successfully.

  • High 7.5

    Wrong memory orderings violates mutual exclusion in spin

    An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion.