Reported

March 31, 2023

Issued

April 4, 2023 (last modified: June 13, 2023)

Package

spin (crates.io)

Type

INFO Unsound

Aliases

• GHSA-2qv5-7mw5-j3cg

References

• https://github.com/mvdnes/spin-rs/issues/148

Patched

• >=0.9.8

Unaffected

• <0.9.3

Description

Once::try_call_once is unsound if invoked more than once concurrently and any call fails to initialise successfully.

Advisory available under CC0-1.0 license.