From 7017997f283fb264d3cdcae05ef10f5480ab858a Mon Sep 17 00:00:00 2001 From: "Jorge C. Leitao" Date: Mon, 18 Oct 2021 17:36:00 +0000 Subject: [PATCH] Added advisory ignore. --- .cargo/audit.toml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .cargo/audit.toml diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 00000000000..aa5492c1beb --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,13 @@ +[advisories] +ignore = [ + # title: Potential segfault in the time crate + # This can be ignored because it only affects users that use the feature flag "clock" of "chrono", + # which we do not. Specifically: + # * the call of "localtime_r" [is unsound](https://github.com/chronotope/chrono/issues/602#issuecomment-940445390) + # * that call [is part of the module "sys"](https://docs.rs/chrono/0.4.19/src/chrono/sys/unix.rs.html#84) + # * "sys" is only available on feature "clock": https://docs.rs/chrono/0.4.19/src/chrono/lib.rs.html#456 + # + # Therefore, this advisory does not affect us. + "RUSTSEC-2020-0071", + "RUSTSEC-2020-0159", # same as previous +]