Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Crossbeam #31

Closed
pythoneer opened this issue Dec 18, 2018 · 4 comments
Closed

Upgrade Crossbeam #31

pythoneer opened this issue Dec 18, 2018 · 4 comments

Comments

@pythoneer
Copy link

Do we have an easy way to upgrade crossbeam to a version >=0.4.1?

As i see it, the current version that is being fetched (3.2) has the "ability" to double-free. Nothing that i am affected by but just as a suggestion. I just get a waring by "cargo-audit" that this version of crossbeam that is pulled by a2 is affected by this:

https://github.com/RustSec/advisory-db/blob/master/crates/crossbeam/RUSTSEC-2018-0009.toml

crossbeam-rs/crossbeam-epoch#82

@pimeys
Copy link
Contributor

pimeys commented Dec 18, 2018

Ha, yeah. It's quite easy it seems, at least this compiles with very small changes.

Our company crashed and I have no apple devices now to test, so feel free to try the master branch with 51ba18a

@pimeys
Copy link
Contributor

pimeys commented Dec 18, 2018

Ah well updated to 0.3.6 with Crossbeam 0.6. If you have any issues file another ticket! Thanks for auditing and reporting!

@pimeys pimeys closed this as completed Dec 18, 2018
@pythoneer
Copy link
Author

Works perfect! Thanks for the fast response. Sad to hear that, i hope you're doing well regardless. Do you plan to still maintain this (and related) crates? I am quite happy with the current state of those.

@pimeys
Copy link
Contributor

pimeys commented Dec 20, 2018

Yes I'll maintain them as a hobby, still planning to go to the async/await syntax with all crates.

Working soon for prisma.io as a Rust engineer, so it worked out quite well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants