Security context

Highlights

Integer Overflow: 1 prior fix. Scrutinize any change in this area.

src/lib.rs: most-fixed (3 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Use After Free: An ABA race condition in 'compare_and_swap' allowed a use-after-free because reader guards or pointers were not kept alive until the atomic swap operation completed entirely. In concurrent environments, this can lead to memory corruption or arbitrary code execution.

Integer Overflow: The active reader guard counter was susceptible to overflowing 'isize::MAX' during 'fetch_add' operations. Without aborting on overflow, this leads to undefined behavior and potential memory safety violations under high concurrency.

Memory Safety: A race condition in internal pointer manipulations ('Arc::from_raw') with incorrect release ordering could trigger use-after-free or double-free vulnerabilities when swapping concurrent Arc pointers.