Security context

Highlights

Data Race: 3 prior fixes. Scrutinize any change in this area.

src/reactor/poll_evented.rs: most-fixed (1 issue). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Data Race: A race condition occurs when both the sender and receiver concurrently access an underlying UnsafeCell upon channel closure, bypassing Rust's thread-safety guarantees. This can lead to undefined behavior or memory corruption under specific race conditions.

Memory Safety: Passing raw slices to the poll_read interface permits safe code to read uninitialized memory buffers, leading to potential information leaks or crashes. Transitioning to a validated ReadBuf wrapper is required to prevent downstream users from accessing uninitialized memory.

Auth Bypass: The ServerOptions builder for Windows named pipes allowed setting the pipe mode in a way that silently wiped previously configured bits. This behavior erased the critical PIPE_REJECT_REMOTE_CLIENTS protection, allowing unauthorized remote connections to local pipes.