1748363 - When NSPR and Rust libstd are used together, they don't use the same environment lock

Status: NEW

(NSPR :: NSPR, defect, P2)

Description

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

Rust's libstd implements its equivalent to PR_SetEnv and PR_GetEnv with its own lock. Obviously, this doesn't compose very well with NSPR's lock. A single lock must be used across both NSPR and Rust.

Filing as a security issue so it gets attention as it potentially causes memory corruption, though it was extensively publicly discussed in https://github.com/rust-lang/rust/issues/27970. (Sorry!)

Comment 1

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

See also bug 1748361.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:KaiE, could you have a look please?

For more information, please visit auto_nag documentation.