You can use a reference cycle to leak a JoinGuard and then the scoped thread can access freed memory:
use std::thread; use std::sync::atomic::AtomicBool; use std::sync::atomic::Ordering::SeqCst; use std::rc::Rc; use std::cell::RefCell; ...
Sign in to post comments.
Comments (0)
Sign in to post comments.