fix: update ruzstd 0.7.2 to 0.7.3

# `ruzstd` 0.7.2 outbounds memory access Affected versions of ruzstd miscalculate the length of the allocated and init section of its internal RingBuffer, leading to uninitialized or out-of-bounds reads in copy_bytes_overshooting of up to 15 bytes. This may result in up to 15 bytes of memory contents being written into the decoded data when decompressing a crafted archive. This may occur multiple times per archive.
lovebaihezi · Dec 3, 2024 · 300a5df · 300a5df
1 parent 353e560
commit 300a5df
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -13,6 +13,7 @@ log = { version = "*", features = [
     "max_level_debug",
     "release_max_level_warn",
 ] }
+ruzstd = { version = "^0.7.3" }
 
 [profile.dev]
 opt-level = 1