How a Rust Borrow-Checker Bug Lets Dead References Escape
A newly reported Rust soundness hole shows how a short-lived reference can enter a generic type whose destructor assumes every reference is permanent. The bug appears at the tricky boundary between variance, field assignment, lifetimes, and drop checking.