Описание
Security update for rust, rust-cbindgen
This update for rust, rust-cbindgen fixes the following issues:
rust was updated for use by Firefox 76ESR.
- Fixed miscompilations with rustc 1.43 that lead to LTO failures (bsc#1173202)
Update to version 1.43.1
- Updated openssl-src to 1.1.1g for CVE-2020-1967.
- Fixed the stabilization of AVX-512 features.
- Fixed
cargo package --listnot working with unpublished dependencies.
Update to version 1.43.0
- Language:
- Fixed using binary operations with
&{number}(e.g.&1.0) not having the type inferred correctly. - Attributes such as
#[cfg()]can now be used onifexpressions. - Syntax only changes:
- Allow
type Foo: Ordsyntactically. - Fuse associated and extern items up to defaultness.
- Syntactically allow
selfin allfncontexts. - Merge
fnsyntax + cleanup item parsing. itemmacro fragments can be interpolated intotraits,impls, andexternblocks. For example, you may now write:macro_rules! mac_trait { ($i:item) => { trait T { $i } } } mac_trait! { fn foo() {} }- These are still rejected semantically, so you will likely receive an error but these changes can be seen and parsed by macros and conditional compilation.
- Allow
- Compiler
-
You can now pass multiple lint flags to rustc to override the previous flags.
For example;
rustc -D unused -A unused-variablesdenies everything in theunusedlint group exceptunused-variableswhich is explicitly allowed. However, passingrustc -A unused-variables -D unuseddenies everything in theunusedlint group includingunused-variablessince the allow flag is specified before the deny flag (and therefore overridden). -
rustc will now prefer your system MinGW libraries over its bundled libraries if they are available on
windows-gnu. -
rustc now buffers errors/warnings printed in JSON.
Libraries:
Arc<[T; N]>,Box<[T; N]>, andRc<[T; N]>, now implementTryFrom<Arc<[T]>>,TryFrom<Box<[T]>>, andTryFrom<Rc<[T]>>respectively. Note These conversions are only available whenNis0..=32.- You can now use associated constants on floats and integers
directly, rather than having to import the module.
e.g. You can now write
u32::MAXorf32::NANwith no imports. u8::is_asciiis nowconst.Stringnow implementsAsMut<str>.- Added the
primitivemodule tostdandcore. This module reexports Rust's primitive types. This is mainly useful in macros where you want avoid these types being shadowed. - Relaxed some of the trait bounds on
HashMapandHashSet. string::FromUtf8Errornow implementsClone + Eq.
- Stabilized APIs
Once::is_completedf32::LOG10_2f32::LOG2_10f64::LOG10_2f64::LOG2_10iter::once_with
-
Cargo
- You can now set config
[profile]s in your.cargo/config, or through your environment. - Cargo will now set
CARGO_BIN_EXE_<name>pointing to a binary's executable path when running integration tests or benchmarks.<name>is the name of your binary as-is e.g. If you wanted the executable path for a binary namedmy-programyou would useenv!('CARGO_BIN_EXE_my-program').
- You can now set config
-
Misc
- Certain checks in the
const_errlint were deemed unrelated to const evaluation, and have been moved to theunconditional_panicandarithmetic_overflowlints.
- Certain checks in the
-
Compatibility Notes
- Having trailing syntax in the
assert!macro is now a hard error. This has been a warning since 1.36.0. - Fixed
Selfnot having the correctly inferred type. This incorrectly led to some instances being accepted, and now correctly emits a hard error.
- Having trailing syntax in the
Update to version 1.42.0:
-
Language
- You can now use the slice pattern syntax with subslices.
- You can now use #[repr(transparent)] on univariant enums. Meaning that you can create an enum that has the exact layout and ABI of the type it contains.
- There are some syntax-only changes:
- default is syntactically allowed before items in trait definitions.
- Items in impls (i.e. consts, types, and fns) may syntactically leave out their bodies in favor of ;.
- Bounds on associated types in impls are now syntactically allowed (e.g. type Foo: Ord;).
- ... (the C-variadic type) may occur syntactically directly as the type of any function parameter. These are still rejected semantically, so you will likely receive an error but these changes can be seen and parsed by procedural macros and conditional compilation.
-
Compiler
- Added tier 2 support for armv7a-none-eabi.
- Added tier 2 support for riscv64gc-unknown-linux-gnu.
- Option::{expect,unwrap} and Result::{expect, expect_err, unwrap, unwrap_err} now produce panic messages pointing to the location where they were called, rather than core's internals. Refer to Rust's platform support page for more information on Rust's tiered platform support.
-
Libraries
- iter::Empty now implements Send and Sync for any T.
- Pin::{map_unchecked, map_unchecked_mut} no longer require the return type to implement Sized.
- io::Cursor now derives PartialEq and Eq.
- Layout::new is now const.
- Added Standard Library support for riscv64gc-unknown-linux-gnu.
-
Stabilized APIs
- CondVar::wait_while
- CondVar::wait_timeout_while
- DebugMap::key
- DebugMap::value
- ManuallyDrop::take
- matches!
- ptr::slice_from_raw_parts_mut
- ptr::slice_from_raw_parts
-
Cargo
- You no longer need to include extern crate proc_macro; to be able to use proc_macro; in the 2018 edition.
-
Compatibility Notes
- Error::description has been deprecated, and its use will now produce a warning. It's recommended to use Display/to_string instead.
Update to version 1.41.1:
- Always check types of static items
- Always check lifetime bounds of
Copyimpls - Fix miscompilation in callers of
Layout::repeat
Update to version 1.41.0:
-
Language
- You can now pass type parameters to foreign items when implementing
traits. E.g. You can now write
impl<T> From<Foo> for Vec<T> {}. - You can now arbitrarily nest receiver types in the
selfposition. E.g. you can now writefn foo(self: Box<Box<Self>>) {}. Previously onlySelf,&Self,&mut Self,Arc<Self>,Rc<Self>, andBox<Self>were allowed. - You can now use any valid identifier in a
format_argsmacro. Previously identifiers starting with an underscore were not allowed. - Visibility modifiers (e.g.
pub) are now syntactically allowed on trait items and enum variants. These are still rejected semantically, but can be seen and parsed by procedural macros and conditional compilation.
- You can now pass type parameters to foreign items when implementing
traits. E.g. You can now write
-
Compiler
- Rustc will now warn if you have unused loop
'labels. - Removed support for the
i686-unknown-dragonflytarget. - Added tier 3 support* for the
riscv64gc-unknown-linux-gnutarget. - You can now pass an arguments file passing the
@pathsyntax to rustc. Note that the format differs somewhat from what is found in other tooling; please see the documentation for more information. - You can now provide
--externflag without a path, indicating that it is available from the search path or specified with an-Lflag.
Refer to Rust's [platform support page][forge-platform-support] for more information on Rust's tiered platform support.
- Rustc will now warn if you have unused loop
-
Libraries
- The
core::panicmodule is now stable. It was already stable throughstd. NonZero*numerics now implementFrom<NonZero*>if it's a smaller integer width. E.g.NonZeroU16now implementsFrom<NonZeroU8>.MaybeUninit<T>now implementsfmt::Debug.
- The
-
Stabilized APIs
Result::map_orResult::map_or_elsestd::rc::Weak::weak_countstd::rc::Weak::strong_countstd::sync::Weak::weak_countstd::sync::Weak::strong_count
-
Cargo
- Cargo will now document all the private items for binary crates by default.
cargo-installwill now reinstall the package if it detects that it is out of date.- Cargo.lock now uses a more git friendly format that should help to reduce merge conflicts.
- You can now override specific dependencies's build settings. E.g.
[profile.dev.package.image] opt-level = 2sets theimagecrate's optimisation level to2for debug builds. You can also use[profile.<profile>.build-override]to override build scripts and their dependencies.
-
Misc
- You can now specify
editionin documentation code blocks to compile the block for that edition. E.g.edition2018tells rustdoc that the code sample should be compiled the 2018 edition of Rust. - You can now provide custom themes to rustdoc with
--theme, and check the current theme with--check-theme. - You can use
#[cfg(doc)]to compile an item when building documentation.
- You can now specify
-
Compatibility Notes
- As previously announced 1.41.0 will be the last tier 1 release for 32-bit Apple targets. This means that the source code is still available to build, but the targets are no longer being tested and release binaries for those platforms will no longer be distributed by the Rust project. Please refer to the linked blog post for more information.
- Bump version of libssh2 for SLE15; we now need a version with libssh2_userauth_publickey_frommemory(), which appeared in libssh2 1.6.0.
Update to version 1.40.0
-
Language
- You can now use tuple
structs and tupleenumvariant's constructors inconstcontexts. e.g. pub struct Point(i32, i32); const ORIGIN: Point = { let constructor = Point; constructor(0, 0) }; - You can now mark
structs,enums, andenumvariants with the#[non_exhaustive]attribute to indicate that there may be variants or fields added in the future. For example this requires adding a wild-card branch (_ => {}) to any match statements on a non-exhaustiveenum. - You can now use function-like procedural macros in
externblocks and in type positions. e.g.type Generated = macro!(); - Function-like and attribute procedural macros can now emit
macro_rules!items, so you can now have your macros generate macros. - The
metapattern matcher inmacro_rules!now correctly matches the modern attribute syntax. For example(#[$m:meta])now matches#[attr],#[attr{tokens}],#[attr[tokens]], and#[attr(tokens)].
- You can now use tuple
-
Compiler
- Added tier 3 support* for the
thumbv7neon-unknown-linux-musleabihftarget. - Added tier 3 support for the
aarch64-unknown-none-softfloattarget. - Added tier 3 support for the
mips64-unknown-linux-muslabi64, andmips64el-unknown-linux-muslabi64targets.
- Added tier 3 support* for the
-
Libraries
- The
is_power_of_twomethod on unsigned numeric types is now aconstfunction.
- The
-
Stabilized APIs
- BTreeMap::get_key_value
- HashMap::get_key_value
- Option::as_deref_mut
- Option::as_deref
- Option::flatten
- UdpSocket::peer_addr
- f32::to_be_bytes
- f32::to_le_bytes
- f32::to_ne_bytes
- f64::to_be_bytes
- f64::to_le_bytes
- f64::to_ne_bytes
- f32::from_be_bytes
- f32::from_le_bytes
- f32::from_ne_bytes
- f64::from_be_bytes
- f64::from_le_bytes
- f64::from_ne_bytes
- mem::take
- slice::repeat
- todo!
-
Cargo
- Cargo will now always display warnings, rather than only on fresh builds.
- Feature flags (except
--all-features) passed to a virtual workspace will now produce an error. Previously these flags were ignored. - You can now publish
dev-dependencieswithout including aversion.
-
Misc
- You can now specify the
#[cfg(doctest)]attribute to include an item only when running documentation tests withrustdoc.
- You can now specify the
-
Compatibility Notes
- As previously announced, any previous NLL warnings in the 2015 edition are now hard errors.
- The
include!macro will now warn if it failed to include the entire file. Theinclude!macro unintentionally only includes the first expression in a file, and this can be unintuitive. This will become either a hard error in a future release, or the behavior may be fixed to include all expressions as expected. - Using
#[inline]on function prototypes and consts now emits a warning underunused_attributelint. Using#[inline]anywhere else inside traits orexternblocks now correctly emits a hard error.
Update to version 1.39.0
-
Language
- You can now create async functions and blocks with async fn, async move {}, and async {} respectively, and you can now call .await on async expressions.
- You can now use certain attributes on function, closure, and function pointer parameters.
- You can now take shared references to bind-by-move patterns in the if guards of match arms.
-
Compiler
- Added tier 3 support for the i686-unknown-uefi target.
- Added tier 3 support for the sparc64-unknown-openbsd target.
- rustc will now trim code snippets in diagnostics to fit in your terminal.
- You can now pass --show-output argument to test binaries to print the output of successful tests.
-
For more details: https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Switch to bundled version of libgit2 for now. libgit2-sys seems to expect using the bundled variant, which just seems to point to a snapshot of the master branch and doesn't match any released libgit2 (bsc#1154817). See: https://github.com/rust-lang/rust/issues/63476 and https://github.com/rust-lang/git2-rs/issues/458 for details.
Update to version 1.38.0
-
Language
- The
#[global_allocator]attribute can now be used in submodules. - The
#[deprecated]attribute can now be used on macros.
- The
-
Compiler
- Added pipelined compilation support to
rustc. This will improve compilation times in some cases.
- Added pipelined compilation support to
-
Libraries
ascii::EscapeDefaultnow implementsCloneandDisplay.- Derive macros for prelude traits (e.g.
Clone,Debug,Hash) are now available at the same path as the trait. (e.g. TheClonederive macro is available atstd::clone::Clone). This also makes all built-in macros available instd/coreroot. e.g.std::include_bytes!. str::Charsnow implementsDebug.slice::{concat, connect, join}now accepts&[T]in addition to&T.*const Tand*mut Tnow implementmarker::Unpin.Arc<[T]>andRc<[T]>now implementFromIterator<T>.- Added euclidean remainder and division operations (
div_euclid,rem_euclid) to all numeric primitives. Additionallychecked,overflowing, andwrappingversions are available for all integer primitives. thread::AccessErrornow implementsClone,Copy,Eq,Error, andPartialEq.iter::{StepBy, Peekable, Take}now implementDoubleEndedIterator.
-
Stabilized APIs
<*const T>::cast<*mut T>::castDuration::as_secs_f32Duration::as_secs_f64Duration::div_f32Duration::div_f64Duration::from_secs_f32Duration::from_secs_f64Duration::mul_f32Duration::mul_f64any::type_name
-
Cargo
- Added pipelined compilation support to
cargo. - You can now pass the
--featuresoption multiple times to enable multiple features.
- Added pipelined compilation support to
-
Misc
rustcwill now warn about some incorrect uses ofmem::{uninitialized, zeroed}that are known to cause undefined behaviour.
Update to version 1.37.0
-
Language
- #[must_use] will now warn if the type is contained in a tuple, Box, or an array and unused.
- You can now use the
cfgandcfg_attrattributes on generic parameters. - You can now use enum variants through type alias. e.g. You can
write the following:
type MyOption = Option<u8>; fn increment_or_zero(x: MyOption) -> u8 { match x { MyOption::Some(y) => y + 1, MyOption::None => 0, } }
- You can now use
_as an identifier for consts. e.g. You can writeconst _: u32 = 5;. - You can now use
#[repr(align(X)]on enums. - The
?Kleene macro operator is now available in the 2015 edition.
-
Compiler
- You can now enable Profile-Guided Optimization with the
-C profile-generateand-C profile-useflags. For more information on how to use profile guided optimization, please refer to the rustc book. - The
rust-lldbwrapper script should now work again.
- You can now enable Profile-Guided Optimization with the
-
Libraries
mem::MaybeUninit<T>is now ABI-compatible withT.
-
Stabilized APIs
- BufReader::buffer
- BufWriter::buffer
- Cell::from_mut
- Cell<[T]>::as_slice_of_cells
- Cell::as_slice_of_cells
- DoubleEndedIterator::nth_back
- Option::xor
- Wrapping::reverse_bits
- i128::reverse_bits
- i16::reverse_bits
- i32::reverse_bits
- i64::reverse_bits
- i8::reverse_bits
- isize::reverse_bits
- slice::copy_within
- u128::reverse_bits
- u16::reverse_bits
- u32::reverse_bits
- u64::reverse_bits
- u8::reverse_bits
- usize::reverse_bits
-
Cargo
- Cargo.lock files are now included by default when publishing executable crates with executables.
- You can now specify
default-run='foo'in[package]to specify the default executable to use forcargo run. - cargo-vendor is now provided as a sub-command of cargo
-
Compatibility Notes
- Using
...for inclusive range patterns will now warn by default. Please transition your code to using the..=syntax for inclusive ranges instead. - Using a trait object without the
dynwill now warn by default. Please transition your code to usedyn Traitfor trait objects instead. Crab(String), Lobster(String), Person(String), let state = Creature::Crab('Ferris'); if let Creature::Crab(name) | Creature::Person(name) = state { println!('This creature's name is: {}', name); } unsafe { foo() } pub fn new(x: i32, y: i32) -> Self { Self(x, y) } pub fn is_origin(&self) -> bool { match self { Self(0, 0) => true, _ => false, } } Self: PartialOrd // can writeSelfinstead ofList<T>Nil, Cons(T, Box) // likewise here fn test(&self) { println!('one'); } //~ ERROR duplicate definitions with nametestfn test(&self) { println!('two'); }
- Using
- Basic procedural macros allowing custom
#[derive], aka 'macros 1.1', are stable. This allows popular code-generating crates like Serde and Diesel to work ergonomically. [RFC 1681]. - [Tuple structs may be empty. Unary and empty tuple structs may be instantiated with curly braces][36868]. Part of [RFC 1506].
- [A number of minor changes to name resolution have been activated][37127].
They add up to more consistent semantics, allowing for future evolution of
Rust macros. Specified in [RFC 1560], see its section on ['changes'] for
details of what is different. The breaking changes here have been transitioned
through the [
legacy_imports] lint since 1.14, with no known regressions. - [In
macro_rules,pathfragments can now be parsed as type parameter bounds][38279] - [
?Sizedcan be used inwhereclauses][37791] - [There is now a limit on the size of monomorphized types and it can be
modified with the
#![type_size_limit]crate attribute, similarly to the#![recursion_limit]attribute][37789] - [On Windows, the compiler will apply dllimport attributes when linking to extern functions][37973]. Additional attributes and flags can control which library kind is linked and its name. [RFC 1717].
- [Rust-ABI symbols are no longer exported from cdylibs][38117]
- [The
--testflag works with procedural macro crates][38107] - [Fix
extern 'aapcs' fnABI][37814] - [The
-C no-stack-checkflag is deprecated][37636]. It does nothing. - [The
format!expander recognizes incorrectprintfand shell-style formatting directives and suggests the correct format][37613]. - [Only report one error for all unused imports in an import list][37456]
- [Avoid unnecessary
mk_tycalls inTy::super_fold_with][37705] - [Avoid more unnecessary
mk_tycalls inTy::super_fold_with][37979] - [Don't clone in
UnificationTable::probe][37848] - [Remove
scope_auxiliaryto cut RSS by 10%][37764] - [Use small vectors in type walker][37760]
- [Macro expansion performance was improved][37701]
- [Change
HirVec<P<T>>toHirVec<T>inhir::Expr][37642] - [Replace FNV with a faster hash function][37229] https://raw.githubusercontent.com/rust-lang/rust/master/RELEASES.md
rust-cbindgen is shipped in version 0.14.1.
Список пакетов
openSUSE Leap 15.2
Ссылки
- E-Mail link for openSUSE-SU-2020:0945-1
- SUSE Security Ratings
- SUSE Bug 1115645
- SUSE Bug 1154817
- SUSE Bug 1173202
- SUSE CVE CVE-2020-1967 page
Описание
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
Затронутые продукты
Ссылки
- CVE-2020-1967
- SUSE Bug 1169407