Skip to content

Commit

Permalink
Update icu_locid, icu_properties
Browse files Browse the repository at this point in the history
This update brings us to zerovec 0.10.4 which addresses a flaw
that Dependabot is warning about:

> The affected versions make unsafe memory accesses under the
> assumption that `#[repr(packed)]` has a guaranteed field order.
>
> The Rust specification does not guarantee this, and
> rust-lang/rust#125360 (1.80.0-beta) starts reordering
> fields of `#[repr(packed)]` structs, leading to illegal memory
> accesses.
>
> The patched versions 0.9.7 and 0.10.3 use `#[repr(C, packed)]`,
> which guarantees field order.
  • Loading branch information
waywardmonkeys committed Jul 25, 2024
1 parent 3306fa1 commit b3f6502
Show file tree
Hide file tree
Showing 2 changed files with 30 additions and 30 deletions.
56 changes: 28 additions & 28 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions fontique/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,8 @@ smallvec = "1.13.2"
memmap2 = { version = "0.9.4", optional = true }
unicode-script = { version = "0.5.6", optional = true }
core_maths = { version = "0.1.0", optional = true }
icu_properties = { version = "1.4.1", optional = true }
icu_locid = "1.4.0"
icu_properties = { version = "1.5.1", optional = true }
icu_locid = "1.5.0"
hashbrown = "0.14.5"

[target.'cfg(target_family="windows")'.dependencies]
Expand Down

0 comments on commit b3f6502

Please sign in to comment.