-
Notifications
You must be signed in to change notification settings - Fork 5
/
0035-late-static.rs
60 lines (51 loc) · 1.51 KB
/
0035-late-static.rs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
/*!
```rudra-poc
[target]
crate = "late-static"
version = "0.3.0"
[report]
issue_url = "https://github.com/Richard-W/late-static/issues/1"
issue_date = 2020-11-10
rustsec_url = "https://github.com/RustSec/advisory-db/pull/611"
rustsec_id = "RUSTSEC-2020-0102"
[[bugs]]
analyzer = "SendSyncVariance"
bug_class = "SendSyncVariance"
bug_count = 1
rudra_report_locations = ["src/lib.rs:30:1: 30:61"]
```
!*/
use late_static::LateStatic;
use std::cell::Cell;
use std::thread;
#[derive(Debug, Clone, Copy)]
enum RefOrInt<'a> {
Ref(&'a u64),
Int(u64),
}
static SOME_INT: u64 = 123;
static STATIC_CELL: LateStatic<Cell<RefOrInt>> = LateStatic::new();
fn main() {
unsafe {
LateStatic::assign(&STATIC_CELL, Cell::new(RefOrInt::Ref(&SOME_INT)));
}
thread::spawn(move || {
loop {
// Repeatedly write Ref(&addr) and Int(0xdeadbeef) into the cell.
STATIC_CELL.set(RefOrInt::Ref(&SOME_INT));
STATIC_CELL.set(RefOrInt::Int(0xdeadbeef));
}
});
loop {
if let RefOrInt::Ref(addr) = STATIC_CELL.get() {
// Hope that between the time we pattern match the object as a
// `Ref`, it gets written to by the other thread.
if addr as *const u64 == &SOME_INT as *const u64 {
continue;
}
// Due to the data race, obtaining Ref(0xdeadbeef) is possible
println!("Pointer is now: {:p}", addr);
println!("Dereferencing addr will now segfault: {}", *addr);
}
}
}