bahman/scylla
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

rust: update dependencies

Browse Source 
Cranelift-codegen 0.92.0 and wasmtime 5.0.0 have security issues
potentially allowing malicious UDFs to read some memory outside
the wasm sandbox. This patch updates them to versions 0.92.1
and 5.0.1 respectively, where the issues are fixed.

Fixes #13157

Closes #13171
This commit is contained in:
Wojciech Mitros
2023-03-14 16:54:51 +01:00
committed by Avi Kivity
parent a79604b0d6
commit aad2afd417
1 changed files with 44 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

88
rust/Cargo.lock generated
View File

@@ -171,18 +171,18 @@ dependencies = [
[[package]]
name = "cranelift-bforest"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2f3d54eab028f5805ae3b26fd60eca3f3a9cfb76b989d9bab173be3f61356cc3"
checksum = "5cb658ef043a07ea4086c65f2e3d770b5dc60b8787a9ef54cf06d792cf613d82"
dependencies = [
"cranelift-entity",
]
[[package]]
name = "cranelift-codegen"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2be1d5f2c3cca1efb691844bc1988b89c77291f13f778499a3f3c0cf49c0ed61"
checksum = "b36618d7ab9ad5da72935623292d364b5482ef42141e0145c0090bfc7f6b8dca"
dependencies = [
"arrayvec",
"bumpalo",
@@ -201,33 +201,33 @@ dependencies = [
[[package]]
name = "cranelift-codegen-meta"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "3f9b1b1089750ce4005893af7ee00bb08a2cf1c9779999c0f7164cbc8ad2e0d2"
checksum = "eb7cab168dac35a2fc53a3591ee36d145d7fc2ebbdb5c70f1f9e35764157af5a"
dependencies = [
"cranelift-codegen-shared",
]
[[package]]
name = "cranelift-codegen-shared"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "cc5fbaec51de47297fd7304986fd53c8c0030abbe69728a60d72e1c63559318d"
checksum = "7dcbdd64e35dfb910ff709e5b2d5e1348f626837685673726d985a620b9d8de5"
[[package]]
name = "cranelift-entity"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "dab984c94593f876090fae92e984bdcc74d9b1acf740ab5f79036001c65cba13"
checksum = "5a9e39cfc857e7e539aa623e03bb6bec11f54aef3dfdef41adcfa7b594af3b54"
dependencies = [
"serde",
]
[[package]]
name = "cranelift-frontend"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "6e0cb3102d21a2fe5f3210af608748ddd0cd09825ac12d42dc56ed5ed8725fe0"
checksum = "78d28039844e3f7817e5a10cbb3d9adbc7188ee9cc4ba43536f304219fcfc077"
dependencies = [
"cranelift-codegen",
"log",
@@ -237,15 +237,15 @@ dependencies = [
[[package]]
name = "cranelift-isle"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "72101dd1f441d629735143c41e00b3428f9267738176983ef588ff43382af0a0"
checksum = "4183c68346d657c40ea06273cc0e9c3fe25f4e51e6decf534c079f34041c43c0"
[[package]]
name = "cranelift-native"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "c22b0d9fcbe3fc5a1af9e7021b44ce42b930bcefac446ce22e02e8f9a0d67120"
checksum = "2dbf72319054ff725a26c579b4070187928ca38e55111b964723bdbacbb1993e"
dependencies = [
"cranelift-codegen",
"libc",
@@ -254,9 +254,9 @@ dependencies = [
[[package]]
name = "cranelift-wasm"
version = "0.92.0"
version = "0.92.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "bddebe32fb14fbfd9efa5f130ffb8f4665795de019928dcd7247b136c46f9249"
checksum = "f3632b478ca00dfad77dbef3ce284f1199930519ab744827726a8e386a6db3f5"
dependencies = [
"cranelift-codegen",
"cranelift-entity",
@@ -1160,9 +1160,9 @@ dependencies = [
[[package]]
name = "wasmtime"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "4e5b183a159484980138cc05231419c536d395a7b25c1802091310ea2f74276a"
checksum = "49ffcc607adc9da024e87ca814592d4bc67f5c5b58e488f5608d5734a1ebc23e"
dependencies = [
"anyhow",
"async-trait",
@@ -1190,18 +1190,18 @@ dependencies = [
[[package]]
name = "wasmtime-asm-macros"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "c0aeb1cb256d76cf07b20264c808351c8b525ece56de1ef4d93f87a0aaf342db"
checksum = "12cb5dc4d79cd7b2453c395f64e9013d2ad90bd083be556d5565cb224ebe8d57"
dependencies = [
"cfg-if",
]
[[package]]
name = "wasmtime-component-macro"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "841561f7792cc46eea82dcf296393c5bab03259e663ff1bfccf71c2ae30e8920"
checksum = "db5c3d25a7d531582fbaa75ce6a86dddc8211c783cb247af053075a0fcc9d3d7"
dependencies = [
"proc-macro2",
"quote",
@@ -1213,15 +1213,15 @@ dependencies = [
[[package]]
name = "wasmtime-component-util"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "048583c2e765cac3e8842dd18a50d4feb3049ef3f182880db6626d6eb8a29383"
checksum = "ff0e0e3a1310cdde7db4e8634bda696ca4f80c429fbd727fa827be5f9cb35d21"
[[package]]
name = "wasmtime-cranelift"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2f7695d3814dcb508bf4d1c181a86ea6b97a209f6444478e95d86e2ffab8d1a3"
checksum = "a66a3f2167a7436910c6cbac2408a7b599688d7114cb8821cb10879dae451759"
dependencies = [
"anyhow",
"cranelift-codegen",
@@ -1240,9 +1240,9 @@ dependencies = [
[[package]]
name = "wasmtime-environ"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "e5a2a5f0fb93aa837a727a48dd1076e8a9f882cc2fee20b433c04a18740ff63b"
checksum = "9350c919553cddf14f78f9452119c8004d7ef6bfebb79a41a21819ed0c5604d8"
dependencies = [
"anyhow",
"cranelift-entity",
@@ -1259,9 +1259,9 @@ dependencies = [
[[package]]
name = "wasmtime-fiber"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "a00a5cbf3ee623d01edea8882eb4352a5370513c6c1942cc5cd56dd806293a8d"
checksum = "7459893ae6d67f9b35b04f44df8dfc037ea7f3071d710b9f7866b79cb2c482ae"
dependencies = [
"cc",
"cfg-if",
@@ -1272,9 +1272,9 @@ dependencies = [
[[package]]
name = "wasmtime-jit"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "01c78f9fb2922dbb5a95f009539d4badb44866caeeb53d156bf2cf4d683c3afd"
checksum = "90ba5779ea786386432b94c9fc9ad5597346c319e8239db0d98d5be5cc109a7e"
dependencies = [
"addr2line",
"anyhow",
@@ -1295,18 +1295,18 @@ dependencies = [
[[package]]
name = "wasmtime-jit-debug"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "67cacdb52a77b8c8e744e510beeabf0bd698b1c94c59eed33c52b3fbd19639b0"
checksum = "f9841a44c82c74101c10ad4f215392761a2523b3c6c838597962bdb6de75fdb3"
dependencies = [
"once_cell",
]
[[package]]
name = "wasmtime-jit-icache-coherence"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "08fcba5ebd96da2a9f0747ab6337fe9788adfb3f63fa2c180520d665562d257e"
checksum = "fd4356c2493002da3b111d470c2ecea65a3017009afce8adc46eaa5758739891"
dependencies = [
"cfg-if",
"libc",
@@ -1315,9 +1315,9 @@ dependencies = [
[[package]]
name = "wasmtime-runtime"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0793210acf50d4c69182c916abaee1d423dc5d172cdfde6acfea2f9446725940"
checksum = "dd26efea7a790fcf430e663ba2519f0ab6eb8980adf8b0c58c62b727da77c2ec"
dependencies = [
"anyhow",
"cc",
@@ -1340,9 +1340,9 @@ dependencies = [
[[package]]
name = "wasmtime-types"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "50d015ba8b231248a811e323cf7a525cd3f982d4be0b9e62d27685102e5f12b1"
checksum = "86e1e4f66a2b9a114f9def450ab9971828c968db6ea6fccd613724b771fa4913"
dependencies = [
"cranelift-entity",
"serde",
@@ -1365,9 +1365,9 @@ dependencies = [
[[package]]
name = "wasmtime-wit-bindgen"
version = "5.0.0"
version = "5.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f51b1f66bc176d85b4bfa0c86731f270697f6e0e673878846c7f2971ab895652"
checksum = "d97566c073045a48b745f3559689295140f00fff7f2799efe8c89cc7e70ae007"
dependencies = [
"anyhow",
"heck",