Skip to content

Remove time dependency #453

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 21, 2021
Merged

Conversation

LunaBorowska
Copy link
Contributor

time 0.1 has known security issues, and it's not really necessary to use time crate anymore for getting precise instants as std::time::Instant::now has the same implementation as precise_time_ns on popular platforms.

time 0.1 has known security issues, and it's not really
necessary to use time crate anymore for getting precise
instants as std::time::Instant::now has the same
implementation as precise_time_ns on popular platforms [1].

[1]: https://stackoverflow.com/a/55619763
@jdm
Copy link
Member

jdm commented Oct 19, 2021

@bors-servo r+

@bors-servo
Copy link
Contributor

📌 Commit b2b8030 has been approved by jdm

@bors-servo
Copy link
Contributor

⌛ Testing commit b2b8030 with merge cb50807...

bors-servo added a commit that referenced this pull request Oct 19, 2021
Remove time dependency

time 0.1 has known security issues, and it's not really necessary to use time crate anymore for getting precise instants as std::time::Instant::now [has the same implementation as precise_time_ns on popular platforms](https://stackoverflow.com/a/55619763).
@bors-servo
Copy link
Contributor

💔 Test failed - checks-github

@LunaBorowska
Copy link
Contributor Author

Test appears to fail because of criterion requiring higher version of Rust than 1.41.

rnestler added a commit to rnestler/attractorr that referenced this pull request Oct 24, 2021
xml5ever only uses `time::precise_time_ns` which is not affected
according to https://rustsec.org/advisories/RUSTSEC-2020-0071. Also
there is a pull request open which will remove the time dependency
completely: servo/html5ever#453
rnestler added a commit to rnestler/attractorr that referenced this pull request Oct 24, 2021
xml5ever only uses `time::precise_time_ns` which is not affected
according to https://rustsec.org/advisories/RUSTSEC-2020-0071. Also
there is a pull request open which will remove the time dependency
completely: servo/html5ever#453
@jdm
Copy link
Member

jdm commented Nov 21, 2021

Addressing the criterion issue in #457.

@bors-servo retry

bors-servo added a commit that referenced this pull request Nov 21, 2021
Remove time dependency

time 0.1 has known security issues, and it's not really necessary to use time crate anymore for getting precise instants as std::time::Instant::now [has the same implementation as precise_time_ns on popular platforms](https://stackoverflow.com/a/55619763).
@bors-servo
Copy link
Contributor

⌛ Testing commit b2b8030 with merge eabc669...

@bors-servo
Copy link
Contributor

💔 Test failed - checks-github

@jdm
Copy link
Member

jdm commented Nov 21, 2021

@bors-servo retry

@bors-servo
Copy link
Contributor

⌛ Testing commit b2b8030 with merge a40ae73...

@bors-servo
Copy link
Contributor

☀️ Test successful - checks-github
Approved by: jdm
Pushing a40ae73 to master...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants