-
Notifications
You must be signed in to change notification settings - Fork 17
Permalink
Choose a base ref
{{ refName }}
default
Choose a head ref
{{ refName }}
default
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
base repository: comex/rust-shlex
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 1.1.0
Could not load branches
Nothing to show
Loading
Could not load tags
Nothing to show
{{ refName }}
default
Loading
...
head repository: comex/rust-shlex
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 1.3.0
Could not load branches
Nothing to show
Loading
Could not load tags
Nothing to show
{{ refName }}
default
Loading
- 11 commits
- 25 files changed
- 5 contributors
Commits on Aug 27, 2021
-
Configuration menu - View commit details
-
Copy full SHA for ca8e63a - Browse repository at this point
Copy the full SHA ca8e63aView commit details
Commits on Feb 2, 2022
-
Configuration menu - View commit details
-
Copy full SHA for 6480b2c - Browse repository at this point
Copy the full SHA 6480b2cView commit details
Commits on Jun 24, 2022
-
Merge pull request #11 from adetaylor/fuzz
Adding fuzzers for unsafe code.
Configuration menu - View commit details
-
Copy full SHA for 6064b48 - Browse repository at this point
Copy the full SHA 6064b48View commit details
Commits on Dec 18, 2022
-
Configuration menu - View commit details
-
Copy full SHA for 18d1dae - Browse repository at this point
Copy the full SHA 18d1daeView commit details -
Configuration menu - View commit details
-
Copy full SHA for aa2d6e3 - Browse repository at this point
Copy the full SHA aa2d6e3View commit details
Commits on Sep 4, 2023
-
Add support for operating on byte strings
This adds a `bytes` submodule for operating on byte strings that might contain invalid UTF-8. Where possible I have switched the functions that operate on `str` to use the `bytes` functions internally to avoid duplicating code and eliminate the potential for differing behavior between the two functions. It includes trivial tests that confirm that the `bytes` version of functions actually work on invalid UTF-8. Fixes #12
Configuration menu - View commit details
-
Copy full SHA for 879d212 - Browse repository at this point
Copy the full SHA 879d212View commit details -
Configuration menu - View commit details
-
Copy full SHA for 0c786d4 - Browse repository at this point
Copy the full SHA 0c786d4View commit details
Commits on Sep 5, 2023
-
Merge pull request #15 from danielparks/bytes
Add support for operating on byte strings
Configuration menu - View commit details
-
Copy full SHA for f44b62e - Browse repository at this point
Copy the full SHA f44b62eView commit details -
Configuration menu - View commit details
-
Copy full SHA for fde8a71 - Browse repository at this point
Copy the full SHA fde8a71View commit details
Commits on Jan 22, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 4c53044 - Browse repository at this point
Copy the full SHA 4c53044View commit details -
Address security issues involving quote API
Ref: GHSA-r7qv-8r2h-pg27 - Deprecate quote APIs in favor of `try_` equivalents that complain about nul bytes. - Also add a builder API, which allows re-enabling nul bytes without using the deprecated interface, and in the future can allow other things (as discussed in quoting_warning). - Add documentation about various security risks that remain, particularly with interactive shells. - Add fuzzers that actually verify round-trippability of the quote APIs against various shells, Python `shlex`, and C `wordexp`. - These are separate crates (as opposed to just being different files under `fuzz/fuzz_targets`) because they have different dependencies and build steps, and I don't want to agglomerate them all together. I've put them in the same workspace at least. - Also, check in Cargo.lock for the fuzzers, since they are binaries. - Add explicit MSRV of 1.46.0. This crate didn't previously have an explicit MSRV, but `cargo msrv` tells me that shlex 1.2.0 works down to Rust 1.36.0. Since this is a security fix, ideally the MSRV wouldn't be bumped at all, but that's not really feasible since the new API uses `#[non_exhaustive]`, which was unstable in Rust 1.36.0. In case anyone is stuck on old Rust versions, I separately released a shlex 1.2.1 that only has the fix for `{`/`}`/`\xa0`, without the API changes. However, even for the full release I'd still like to keep the MSRV reasonably old. I picked 1.46.0 because it's the first version that wouldn't require completely redoing the `const fn` bitmask. - Add more authors to Cargo.toml based on Git commits.
Configuration menu - View commit details
-
Copy full SHA for 4a0724b - Browse repository at this point
Copy the full SHA 4a0724bView commit details
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff 1.1.0...1.3.0