Skip to content
OpenAdvisories

Package · crates.io

tokio

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Low —

    Tokio broadcast channel calls clone in parallel, but does not require `Sync`

    The broadcast channel internally calls `clone` on the stored value when receiving it, and only requires `T:Send`. This means that using the broadcast channel with values that are `Send` but not `Sync` can trigger unsoundness if the `clone` implementation make…

  • Low —

    `tokio::io::ReadHalf<T>::unsplit` is Unsound

    `tokio::io::ReadHalf<T>::unsplit` can violate the `Pin` contract The soundness issue is described in the [tokio/issues#5372](https://github.com/tokio-rs/tokio/issues/5372) Specific set of conditions needed to trigger an issue (a !Unpin type in ReadHalf) is un…