RUSTSEC-2022-0008: 
Rust vulnerability analysis and mitigation

The vulnerability RUSTSEC-2022-0008 was identified in the TypedEventHandler implementation within the windows-rs crate. The issue relates to unsound behavior in handling thread-safe operations, where the crate incorrectly allows safe code to send non-Send types across thread boundaries (GitHub Issue).

The vulnerability stems from the TypedEventHandler::new constructor implementation, which lacks proper thread safety bounds. Specifically, the FnMut closure used in the constructor does not enforce the Send trait bound, allowing potentially unsafe cross-thread operations. This becomes particularly problematic when used with methods like Direct3D11CaptureFramePool::CreateFreeThreaded, where callbacks run on worker threads (GitHub Issue).

The vulnerability could lead to undefined behavior in multi-threaded applications using the windows-rs crate, particularly when handling event callbacks across different threads. This could potentially result in memory safety violations and application crashes when non-thread-safe types are inadvertently shared between threads (GitHub Issue).