diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 00000000000..aa5492c1beb --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,13 @@ +[advisories] +ignore = [ + # title: Potential segfault in the time crate + # This can be ignored because it only affects users that use the feature flag "clock" of "chrono", + # which we do not. Specifically: + # * the call of "localtime_r" [is unsound](https://github.com/chronotope/chrono/issues/602#issuecomment-940445390) + # * that call [is part of the module "sys"](https://docs.rs/chrono/0.4.19/src/chrono/sys/unix.rs.html#84) + # * "sys" is only available on feature "clock": https://docs.rs/chrono/0.4.19/src/chrono/lib.rs.html#456 + # + # Therefore, this advisory does not affect us. + "RUSTSEC-2020-0071", + "RUSTSEC-2020-0159", # same as previous +]