Skip to content

v0.4.1

@ruuda ruuda tagged this 25 Aug 11:10
This is a bugfix release that addresses a security issue that had been
present in Claxon since its initial release.

Compatibility:

- No breaking changes.
- Compatible with Rust 1.13 through 1.28.

Bugs fixed:

- A bug where uninitialized memory or previous decode buffer contents
  could be exposed when decoding a maliciously crafted file has been
  fixed.

Thanks Sergey "Shnatsel" Davidoff for identifying the bug.
Assets 2
Loading