GHSA-p9m5-3hj7-cp5r
futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| crates.io | futures-task | < 0.3.5 | 0.3.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
Affected versions of the crate used a UnsafeCell in thread-local storage to return a noop waker reference, assuming that the reference would never be returned from another thread.
This resulted in a segmentation fault crash if Waker::wake_by_ref() was called on a waker returned from another thread due to it attempting to dereference a pointer that wasn't accessible from the main thread.
References
External links from the advisory. They lead to third-party sites.