From 789aec01a39ab6c6bff23305d3f2bba91af59a2c Mon Sep 17 00:00:00 2001 From: "Sergey \"Shnatsel\" Davidoff" Date: Sun, 15 Sep 2024 06:58:17 +0100 Subject: [PATCH] Lexical is maintained again, unsoundness is fixed --- crates/lexical/RUSTSEC-2023-0055.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/crates/lexical/RUSTSEC-2023-0055.md b/crates/lexical/RUSTSEC-2023-0055.md index 94749bd2..b169d9cd 100644 --- a/crates/lexical/RUSTSEC-2023-0055.md +++ b/crates/lexical/RUSTSEC-2023-0055.md @@ -8,7 +8,7 @@ references = ["https://github.com/Alexhuszagh/rust-lexical/issues/102", "https:/ aliases = ["GHSA-c2hm-mjxv-89r4"] [versions] -patched = [] +patched = [">= 7.0.0"] ``` # Multiple soundness issues @@ -20,7 +20,7 @@ patched = [] 1. [The `BytesIter` trait has safety invariants but is public and not marked `unsafe`](https://github.com/Alexhuszagh/rust-lexical/issues/104) 1. [`write_float()` calls `MaybeUninit::assume_init()` on uninitialized data, which is is not allowed by the Rust abstract machine](https://github.com/Alexhuszagh/rust-lexical/issues/95) -The crate also has some correctness issues and appears to be unmaintained. +The crate also has some correctness issues. ## Alternatives