Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cargo.toml: tss-esapi bindings #502

Merged
merged 1 commit into from
Jan 20, 2023
Merged

Conversation

aplanas
Copy link
Contributor

@aplanas aplanas commented Jan 17, 2023

Generate the tss-esapi bindings during compilation time. This will extend the ammount of supported architectures.

This is a regression done after the crate split, that was fixed before in #459.

Signed-off-by: Alberto Planas [email protected]

Copy link
Contributor

@ueno ueno left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for catching this; looks good to me (nit: a typo in commit message: "ammount" → "amount").

@aplanas
Copy link
Contributor Author

aplanas commented Jan 17, 2023

I will fix the commit message, but I will drop the changes in the lock file, I think that they should not be there

@aplanas
Copy link
Contributor Author

aplanas commented Jan 17, 2023

Should me done, tested here: https://build.opensuse.org/package/show/home:aplanas:branches:security/rust-keylime and we have ppc and s390x binaries : )

@ueno
Copy link
Contributor

ueno commented Jan 18, 2023

cargo audit detects an issue that the unmaintained ansi_term crate is used through tss-esapi → bindgen 0.59.2 → clap 2:
https://github.com/keylime/rust-keylime/actions/runs/3938762221/jobs/6737828590#step:5:64

Maybe we need a bump of bindgen requirement in rust-tss-esapi to 0.60 at least?

aplanas added a commit to aplanas/rust-tss-esapi that referenced this pull request Jan 18, 2023
The optional bindgen dependency was set to a version that depends on an
old version of clap, and also depends on the ansi_term crate, now
unmaintained and causing audit complains. See [1] for an example.

This patch upgrade to bindgen 0.63.0 and drop the dependency to the
affected crate.

[1] keylime/rust-keylime#502

Signed-off-by: Alberto Planas <[email protected]>
@aplanas
Copy link
Contributor Author

aplanas commented Jan 18, 2023

bump of bindgen requirement in rust-tss-esapi to 0.60 at least?

Done here: parallaxsecond/rust-tss-esapi#386

aplanas added a commit to aplanas/rust-tss-esapi that referenced this pull request Jan 18, 2023
The optional bindgen dependency was set to a version that depends on an
old version of clap, and also depends on the ansi_term crate, now
unmaintained and causing audit complains. See [1] for an example.

This patch upgrade to bindgen 0.60.0 and drop the dependency to the
affected crate.

In the future we should update 0.63, but in this case the minimal rustc
version required will be 1.57

[1] keylime/rust-keylime#502

Signed-off-by: Alberto Planas <[email protected]>
aplanas added a commit to aplanas/rust-tss-esapi that referenced this pull request Jan 18, 2023
The optional bindgen dependency was set to a version that depends on an
old version of clap, and also depends on the ansi_term crate, now
unmaintained and causing audit complains. See [1] for an example.

This patch upgrade to bindgen 0.63.0 and drop the dependency to the
affected crate.

[1] keylime/rust-keylime#502

Signed-off-by: Alberto Planas <[email protected]>
Generate the tss-esapi bindings during compilation time.  This will
extend the amount of supported architectures.

This is a regression done after the crate split, that was fixed before
in keylime#459.

Signed-off-by: Alberto Planas <[email protected]>
@ansasaki
Copy link
Contributor

/packit retest-failed

@ansasaki ansasaki merged commit 52e4006 into keylime:master Jan 20, 2023
aplanas added a commit to aplanas/rust-tss-esapi that referenced this pull request Feb 2, 2023
The optional bindgen dependency was set to a version that depends on an
old version of clap, and also depends on the ansi_term crate, now
unmaintained and causing audit complains. See [1] for an example.

This patch upgrade to bindgen 0.63.0 and drop the dependency to the
affected crate.

[1] keylime/rust-keylime#502

Signed-off-by: Alberto Planas <[email protected]>
@ansasaki ansasaki added the dependencies Pull requests that update a dependency file label Feb 16, 2023
@aplanas aplanas deleted the fix_tss-essapi branch February 16, 2023 13:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants