-
-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Open
Labels
A-dependenciesPull requests that update a dependency filePull requests that update a dependency fileI-safetySome piece of code violates memory safety guarantees.Some piece of code violates memory safety guarantees.
Description
Servo is currently using 0.20
which has multiple soundness holes. (For example, https://docs.rs/freetype-sys/0.20.1/freetype_sys/fn.FT_HAS_MULTIPLE_MASTERS.html should be unsafe).
This also requires us to bump freetype-sys
in the following servo-owned crates:
harfbuzz-sys
freetype
This is slightly inconvenient: Bumping freetype-sys
is a breaking change, as only a single dependency can link to freetype at a time. Thus, any user of the crates above would have to update as well.
Metadata
Metadata
Assignees
Labels
A-dependenciesPull requests that update a dependency filePull requests that update a dependency fileI-safetySome piece of code violates memory safety guarantees.Some piece of code violates memory safety guarantees.