Skip to content

Commit 7a9dffe

Browse files
committed
chrono insecurly uses localtime_r
RUSTSEC-2020-0159 is about chrono calling localtime_r. Right now there is no safe version, see this issue: chronotope/chrono#499
1 parent d91731b commit 7a9dffe

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

.cargo/audit.toml

+4-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,9 @@
11
[advisories]
22
ignore = [
3-
# difference is unmaintained, is a dependency of pretty_assertions
4-
"RUSTSEC-2020-0095",
3+
# chrono: Potential segfault in `localtime_r` invocations
4+
# chrono is an optional depenency, so we can ignore the warning.
5+
# Right now there is no safe version of chrono to upgrade to.
6+
"RUSTSEC-2020-0159",
57
]
68
# warn for categories of informational advisories
79
informational_warnings = [

0 commit comments

Comments
 (0)