Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

security: Avoid using buggy atty crate #45

Merged
merged 1 commit into from
Aug 26, 2023
Merged

Commits on Nov 28, 2022

  1. security: Avoid using buggy atty crate

    Switches to newer `is-terminal` crate instead.
    This functionality is also availible on the nightly
    Rust stdlib as a `std::io::IsTerminal` trait.
    
    Avoids RUSTSEC-2021-0145 (softprops/atty#50)
    Fixes slog-rs/slog#319
    
    Based on the information in the vulnerability database,
    I don't consider this a particularly serious bug.
    
    > In practice however, the pointer won't be unaligned
       unless a custom global allocator is used.
    Techcable committed Nov 28, 2022
    Configuration menu
    Copy the full SHA
    7f43921 View commit details
    Browse the repository at this point in the history