Skip to content

Commit 4f618e7

Browse files
authored
Add unsound advisory for Tokio 7232 (#2272)
1 parent f1688a2 commit 4f618e7

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

crates/tokio/RUSTSEC-0000-0000.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
```toml
2+
[advisory]
3+
id = "RUSTSEC-0000-0000"
4+
package = "tokio"
5+
date = "2025-04-07"
6+
url = "https://github.com/tokio-rs/tokio/pull/7232"
7+
informational = "unsound"
8+
categories = ["memory-corruption"]
9+
10+
[versions]
11+
patched = [">= 1.38.2, < 1.39.0", ">= 1.43.1, < 1.44.0", ">= 1.44.2"]
12+
unaffected = ["< 0.2.5"]
13+
```
14+
15+
# Broadcast channel calls clone in parallel, but does not require `Sync`
16+
17+
The broadcast channel internally calls `clone` on the stored value when
18+
receiving it, and only requires `T:Send`. This means that using the broadcast
19+
channel with values that are `Send` but not `Sync` can trigger unsoundness if
20+
the `clone` implementation makes use of the value being `!Sync`.
21+
22+
Thank you to Austin Bonander for finding and reporting this issue.

0 commit comments

Comments
 (0)