Skip to content

Prevent too deep recursion#109

Merged
dtolnay merged 2 commits into
chyh1990:masterfrom
sugar700:prevent-too-deep-recursion
Sep 15, 2018
Merged

Prevent too deep recursion#109
dtolnay merged 2 commits into
chyh1990:masterfrom
sugar700:prevent-too-deep-recursion

Conversation

@sugar700

Copy link
Copy Markdown
Contributor

No description provided.

@dtolnay dtolnay left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@dtolnay dtolnay force-pushed the prevent-too-deep-recursion branch from 644ee83 to 35ca228 Compare September 15, 2018 16:18
@dtolnay dtolnay merged commit 7eb6b6a into chyh1990:master Sep 15, 2018
@Shnatsel

Shnatsel commented Jan 5, 2019

Copy link
Copy Markdown

Is it possible to backport this to 0.3.x series? According to crates.io stats, half of the recent downloads of rust-yaml are in the 0.3.x.

If this fix is already backported, please let me know and I'll update the security advisory.

@sugar700

sugar700 commented Jan 6, 2019

Copy link
Copy Markdown
Contributor Author

@Shnatsel Most of the rust-yaml downloads are due to clap, which isn't really affected by this issue, making this mostly unimportant.

@Shnatsel

Shnatsel commented Jan 6, 2019

Copy link
Copy Markdown

There is a total of 165 crates on crates.io currently affected without a semver-compatible upgrade path, according to crates-audit. So it might not be as unimportant as it seems.

@Shnatsel

Shnatsel commented Jan 6, 2019

Copy link
Copy Markdown

Here's the list of affected crates, without crates depending on clap, sorted by recent download count: https://ncry.pt/p/vzOn#8UqV4ktfnn67-ReSMfvj-xjFZQq1wdDh3uUzK8AhxBk
That's 51 crates, nothing really critical at the top of the list as far as I can tell.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants