Skip to content

Conversation

@Darksonn
Copy link
Contributor

@Darksonn Darksonn commented Dec 25, 2020

1.0.1 (December 25, 2020)

This release fixes a soundness hole caused by the combination of RwLockWriteGuard::map and RwLockWriteGuard::downgrade by removing the map function. This is a breaking change, but breaking changes are allowed under our semver policy when they are required to fix a soundness hole. (See this RFC for more.)

Note that we have chosen not to do a deprecation cycle or similar because Tokio 1.0.0 was released two days ago, and therefore the impact should be minimal.

Due to the soundness hole, we have also yanked Tokio version 1.0.0.

Removed

Fixed

@Darksonn Darksonn added the A-tokio Area: The main tokio crate label Dec 25, 2020
@Darksonn Darksonn merged commit 2330edc into master Dec 25, 2020
@Darksonn Darksonn deleted the prepare-tokio-1.0.1 branch December 25, 2020 21:20
scottlamb added a commit to scottlamb/http-serve that referenced this pull request Jan 10, 2021
tokio 1.0.0 was yanked due to a soundness hole.
tokio-rs/tokio#3347
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

A-tokio Area: The main tokio crate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants