GitoxideLabs/gitoxide gix-pack-v0.69.0

gix-pack v0.69.0

on GitHub

Chore

• Add fuzz-testing
  That's the only way to be reasonably sure it will not panic when parsing
  malformed files.
• add package.include directives to control which files are packaged.

Bug Fixes

• secure reading of corruped or malformed pack files, pack index or multi-indices

New Features (BREAKING)

• enforce the specification of alloc_init_bytes to handle untrusted input
  This breaking change is intended to force a decision about how
  much memory allocation an untrusted party can command by tempering
  with binary file formats.
• parameterize data
  Previously we'd hardcode a memory map, but now this is parameterised
  with a trait to allow accessing data in a more abstract form.
  This is primarily meant to speedup fuzz testing,
  but may also be useful later for portability.

Bug Fixes (BREAKING)

• remove insecure leb64 and secure leb64_from_read from overflows

Commit Statistics

• 20 commits contributed to the release over the course of 32 calendar days.
• 32 days passed between releases.
• 6 commits were understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details