mirror of
https://review.coreboot.org/flashrom.git
synced 2025-04-29 07:53:44 +02:00
b402911a28
An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free. To prevent any potential problems, update this crate to version 0.9 (as of writing, sys-info version 0.9.1 is the latest). Refer to CVE-2020-36434 for more details about the sys-info crate bug. TEST=Run `cargo build` in `util/flashrom_tester`, it still works fine. Change-Id: I3b6b21e830ff3107860f7bcbfe2d58b29efe0c12 Signed-off-by: Angel Pons <th3fanbus@gmail.com> Reviewed-on: https://review.coreboot.org/c/flashrom/+/63975 Reviewed-by: Edward O'Callaghan <quasisec@chromium.org> Reviewed-by: Anastasia Klimchuk <aklm@chromium.org> Reviewed-by: Peter Marheine <pmarheine@chromium.org> Reviewed-by: Jack Rosenthal <jrosenth@chromium.org> Reviewed-by: Tim Wawrzynczak <twawrzynczak@chromium.org> Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
34 lines
926 B
TOML
34 lines
926 B
TOML
[package]
|
|
name = "flashrom_tester"
|
|
version = "1.6.0"
|
|
authors = ["Edward O'Callaghan <quasisec@chromium.org>",
|
|
"Peter Marheine <pmarheine@chromium.org>"]
|
|
edition = "2018"
|
|
build = "build.rs"
|
|
|
|
[lib]
|
|
name = "flashrom_tester"
|
|
|
|
[[bin]]
|
|
name = "flashrom_tester"
|
|
required-features = ["cli"]
|
|
|
|
[dependencies]
|
|
built = { version = "0.3", default-features = false, features = ["serialized_time", "serialized_version"] }
|
|
chrono = { version = "0.4", optional = true }
|
|
clap = { version = "2.33", default-features = false, optional = true }
|
|
flashrom = { path = "flashrom/" }
|
|
libc = "0.2"
|
|
log = { version = "0.4", features = ["std"] }
|
|
rand = "0.6.4"
|
|
serde_json = "1"
|
|
sys-info = "0.9"
|
|
|
|
[build-dependencies]
|
|
built = { version = "0.3", default-features = false, features = ["serialized_time", "serialized_version"] }
|
|
|
|
[features]
|
|
# Features required to build the CLI binary but not the library
|
|
cli = ["chrono", "clap"]
|
|
default = ["cli"]
|