The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
Microsoft’s AI bug hunter finds Rust flaw that went undetected for nearly 11 years
- Published
- Record updated
Summary
Microsoft researchers reported a memory-safety bug in Rust's standard library that went undetected for nearly 11 years, along with other flaws that can trigger undefined behavior even in safe Rust. The process::exit function, when called from a child thread, could remove the main thread's alternate signal stack while in use, so a later stack overflow could cause a segmentation fault instead of Rust's intended handling. Microsoft said it found no reliable exploitation path under the conditions it examined and considered practical exploitation unlikely.
Mitigation
Microsoft said the reported fix for the MapWindows::clone panic-safety issue prevents the partially initialized buffer from being destroyed before initialization is complete. No fix is stated for the process::exit signal stack issue in the source text.