Upon panic in a user-provided function f, fn mutate() & fn mutate2 drops twice a same object.

Affected versions of this crate did not guard against double drop while temporarily duplicating an object's ownership with ptr::read().

Dropping a same object can result in memory corruption.

The flaw was corrected in version "0.9.11" by fixing the code to abort upon panic.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-25907
• strake/containers.rs#2
• https://rustsec.org/advisories/RUSTSEC-2021-0010.html