VDB
Sign up
—

RUSTSEC-2023-0001

reject_remote_clients Configuration corruption

Details

On Windows, configuring a named pipe server with [pipe_mode] will force [ServerOptions]::[reject_remote_clients] as `false`.

This drops any intended explicit configuration for the [reject_remote_clients] that may have been set as `true` previously.

The default setting of [reject_remote_clients] is normally `true` meaning the default is also overridden as `false`.

## Workarounds

Ensure that [pipe_mode] is set first after initializing a [ServerOptions]. For example:

```rust let mut opts = ServerOptions::new(); opts.pipe_mode(PipeMode::Message); opts.reject_remote_clients(true); ```

[ServerOptions]: https://docs.rs/tokio/latest/tokio/net/windows/named_pipe/struct.ServerOptions.html [pipe_mode]: https://docs.rs/tokio/latest/tokio/net/windows/named_pipe/struct.ServerOptions.html#method.pipe_mode [reject_remote_clients]: https://docs.rs/tokio/latest/tokio/net/windows/named_pipe/struct.ServerOptions.html#method.reject_remote_clients

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/tokio
Introduced in: 1.7.0Fixed in: 1.18.4

Upgrade tokio to 1.18.4 or newer (ecosystem crates.io).

References