GitHub Advisoryadvisory · crates.io

GHSA-2qv5-7mw5-j3cg spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers

MEDIUM Published 2023-04-03 Modified 2023-04-03 Official page ↗

Ecosystem: crates.io
Packages: spin
Severity: Moderate
Reviewed: 2023-04-03

Affected packages

• crates.io spin: >= 0.9.3, < 0.9.8 → fixed in 0.9.8

Description

`Once::try_call_once` is unsound if invoked more than once concurrently and any call fails to initialise successfully.

References