VDB
Sign up
MEDIUM

GHSA-2qv5-7mw5-j3cg

spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers

Details

`Once::try_call_once` is unsound if invoked more than once concurrently and any call fails to initialise successfully.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/spin
Introduced in: 0.9.3Fixed in: 0.9.8

Upgrade spin to 0.9.8 or newer (ecosystem crates.io).

References