Closed
Description
Details | |
---|---|
Package | fast-float |
Version | 0.2.0 |
Warning | unsound |
URL | aldanor#35 |
Patched Versions | n/a |
fast-float
contains multiple soundness issues:
- Undefined behavior when checking input length, which has been merged but no package pubished.
- Many functions marked as safe with non-local safety guarantees
The library is also unmaintained.
Alternatives
For quickly parsing floating-point numbers third-party crates are generally no longer needed. A fast float parsing algorithm by the author of lexical
has been merged into libcore. When requiring direct parsing from bytes and/or partial parsers, the fast-float2
fork of fast-float
containing these security patches and reduces overall usage of unsafe.
Metadata
Metadata
Assignees
Labels
No labels