Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport and bump secp256k1 0.23.5 #556

Conversation

tcharding
Copy link
Member

@tcharding tcharding commented Dec 5, 2022

Backport #548 and bump version ready for release.

Note

Patch one fixes a trivial clippy issue so we lint cleanly on every patch.

tcharding and others added 4 commits December 6, 2022 08:19
Clippy emits:

  error: deref on an immutable reference

As suggested, do not deref.
Fixes unsoundness in `preallocated_gen_new` which previously did not
properly constrain the lifetime of the buffer used to back the context
object. We introduce an unsafe marker trait, and impl it for our
existing preallocated-context markers.

Annoyingly the trait has to be public even though it should never be
used directly, and is only used alongside the sealed `Context` trait,
so it is de-facto sealed itself.

Fixes rust-bitcoin#543
Add `# Safety` section to the rustdocs of the `PrealocatedContext`
trait. This change was back ported manually (instead of directly
cherry-picking the patch) so as to add a blank newline after the heading
as is customary.

Original: `commit 1e6eb6c`
Done after backport to fix unsoundness issue.
@tcharding tcharding changed the base branch from master to secp256k1-0.23.x December 5, 2022 21:21
Copy link
Collaborator

@Kixunil Kixunil left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK 70e8cbe

@@ -1,6 +1,6 @@
[package]
name = "secp256k1"
version = "0.23.4"
version = "0.23.5"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, it's 5, not 3, I have advisory report wrong 🤦‍♂️

@apoelstra apoelstra merged commit d7306bb into rust-bitcoin:secp256k1-0.23.x Dec 7, 2022
@tcharding tcharding deleted the backport-and-bump-secp256k1-0.23.5 branch October 9, 2023 22:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants