Skip to content

Add unsound advisory for dyn-future#2760

Merged
djc merged 1 commit intorustsec:mainfrom
xizheyin:dyn-future
Apr 2, 2026
Merged

Add unsound advisory for dyn-future#2760
djc merged 1 commit intorustsec:mainfrom
xizheyin:dyn-future

Conversation

@xizheyin
Copy link
Copy Markdown
Contributor

@xizheyin xizheyin commented Apr 2, 2026

For #2595 cc @djc

Copy link
Copy Markdown
Member

@djc djc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, although I think we should call out that it is unmaintained.


DynFuture is unsound because its Drop implementation transmutes a trait-object reference into unrelated reference types, which constructs an invalid reference from trait object metadata.

This issue was reproduced against `dyn-future` 3.0.4 under Miri. And the crate is unmaintained.
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I point out that the crate is unmaintained in this version

@djc djc merged commit 7232e9a into rustsec:main Apr 2, 2026
1 check passed
@xizheyin xizheyin deleted the dyn-future branch April 2, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants