RUSTSEC-2020-0146: arr! macro erases lifetimes #35
Comments
CjS77
added a commit
that referenced
this issue
Jul 3, 2021
This PR moves all dependencies to use the digest 0.9 traits and APIs. This is a breaking change, so the minor version is incremented. Clients of this generally only need to update the `result` method to `finalize`; and obviously make use of the v0.9 `digest::Digest` trait where necessary. As a result, the deprecated k12, sha3 and Blake3 objects can be removed. Methods and functins that need a hasher are all generic over `Digest`. We retain the convenience wrapper over `VarBlake2B` to produce 256 bit hashes and implement the necessary sub-traits to support `digest::Digest`. This update also fixes #35
Merged
CjS77
added a commit
that referenced
this issue
Jul 5, 2021
* Migrate to digest 0.9 This PR moves all dependencies to use the digest 0.9 traits and APIs. This is a breaking change, so the minor version is incremented. Clients of this generally only need to update the `result` method to `finalize`; and obviously make use of the v0.9 `digest::Digest` trait where necessary. As a result, the deprecated k12, sha3 and Blake3 objects can be removed. Methods and functins that need a hasher are all generic over `Digest`. We retain the convenience wrapper over `VarBlake2B` to produce 256 bit hashes and implement the necessary sub-traits to support `digest::Digest`. This update also fixes #35 * Update src/ristretto/ristretto_keys.rs Co-authored-by: Stan Bondi <sdbondi@users.noreply.github.com> Co-authored-by: Stan Bondi <sdbondi@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
generic-array0.12.4>=0.14.0<0.8.0Affected versions of this crate allowed unsoundly extending
lifetimes using
arr!macro. This may result in a variety ofmemory corruption scenarios, most likely use-after-free.
See advisory page for additional details.
The text was updated successfully, but these errors were encountered: