Lucene search

K
osvGoogleOSV:GHSA-P9M5-3HJ7-CP5R
HistoryMay 24, 2022 - 5:37 p.m.

futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer

2022-05-2417:37:49
Google
osv.dev
10
futures_task crate
thread-local storage
segmentation fault
waker::wake_by_ref

EPSS

0

Percentile

12.8%

Affected versions of the crate used a UnsafeCell in thread-local storage to return a noop waker reference, assuming that the reference would never be returned from another thread.

This resulted in a segmentation fault crash if Waker::wake_by_ref() was called on a waker returned from another thread due to it attempting to dereference a pointer that wasn’t accessible from the main thread.

EPSS

0

Percentile

12.8%