Skip to content

Commit

Permalink
Update v8 used during fuzzing (bytecodealliance#8141)
Browse files Browse the repository at this point in the history
Haven't done this in awhile, figured it was about time.
  • Loading branch information
alexcrichton authored Mar 15, 2024
1 parent acbbf34 commit 5b576da
Show file tree
Hide file tree
Showing 5 changed files with 64 additions and 17 deletions.
33 changes: 22 additions & 11 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion crates/fuzzing/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ wasmi = "0.31.1"
# though, so we could use that if we wanted. For now though just simplify a bit
# and don't depend on this on Windows. The same applies on s390x and riscv.
[target.'cfg(not(any(windows, target_arch = "s390x", target_arch = "riscv64")))'.dependencies]
v8 = "0.74.1"
v8 = "0.86.0"

[dev-dependencies]
wat = { workspace = true }
Expand Down
18 changes: 18 additions & 0 deletions supply-chain/audits.toml
Original file line number Diff line number Diff line change
Expand Up @@ -1319,6 +1319,12 @@ criteria = "safe-to-deploy"
delta = "0.18.1 -> 0.19.1"
notes = "Just a dependency version bump"

[[audits.fslock]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-run"
delta = "0.1.8 -> 0.2.1"
notes = "Internal and external refactorings plus `unsafe` where one would expect."

[[audits.futures]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -1429,6 +1435,12 @@ who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.3.0"

[[audits.home]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-run"
delta = "0.5.3 -> 0.5.9"
notes = "No major changes, just some internal refactorings."

[[audits.http]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -3120,6 +3132,12 @@ who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
delta = "0.23.0 -> 0.25.2"

[[audits.which]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-run"
delta = "4.4.0 -> 5.0.0"
notes = "Only one `unsafe` block, it's what a `which` crate is expected to be."

[[audits.winx]]
who = "Dan Gohman <dev@sunfishcode.online>"
criteria = "safe-to-deploy"
Expand Down
6 changes: 1 addition & 5 deletions supply-chain/config.toml
Original file line number Diff line number Diff line change
Expand Up @@ -571,7 +571,7 @@ version = "1.0.0"
criteria = "safe-to-deploy"

[[exemptions.v8]]
version = "0.74.1"
version = "0.86.0"
criteria = "safe-to-run"

[[exemptions.wait-timeout]]
Expand Down Expand Up @@ -603,10 +603,6 @@ version = "0.3.57"
criteria = "safe-to-deploy"
notes = "dependency of ring for wasm32 browser platform, which our project does not target"

[[exemptions.which]]
version = "4.2.5"
criteria = "safe-to-run"

[[exemptions.winapi]]
version = "0.3.9"
criteria = "safe-to-deploy"
Expand Down
22 changes: 22 additions & 0 deletions supply-chain/imports.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1377,6 +1377,12 @@ criteria = "safe-to-deploy"
version = "0.22.4"
notes = "Inspected it to confirm that it only contains data definitions and no runtime code"

[[audits.embark-studios.audits.which]]
who = "Johan Andersson <opensource@embark-studios.com>"
criteria = "safe-to-run"
version = "4.4.0"
notes = "Small build-time crate to find path of binary. Single unsafe usage, file system access, both look sound"

[[audits.fermyon.audits.oorandom]]
who = "Radu Matei <radu.matei@fermyon.com>"
criteria = "safe-to-run"
Expand Down Expand Up @@ -1449,6 +1455,11 @@ who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
delta = "1.17.2 -> 1.18.0"

[[audits.isrg.audits.once_cell]]
who = "Brandon Pitman <bran@bran.land>"
criteria = "safe-to-deploy"
delta = "1.18.0 -> 1.19.0"

[[audits.isrg.audits.rand_chacha]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -1711,6 +1722,17 @@ version = "0.12.3"
notes = "This version is used in rust's libstd, so effectively we're already trusting it"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"

[[audits.mozilla.audits.home]]
who = "Nika Layzell <nika@thelayzells.com>"
criteria = "safe-to-deploy"
version = "0.5.3"
notes = """
Crate with straightforward code for determining the user's HOME directory. Only
unsafe code is used to invoke the Windows SHGetFolderPathW API to get the
profile directory when the USERPROFILE environment variable is unavailable.
"""
aggregated-from = "https://github.com/raw/mozilla/cargo-vet/main/supply-chain/audits.toml"

[[audits.mozilla.audits.itertools]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
Expand Down

0 comments on commit 5b576da

Please sign in to comment.