522

This doesn't test very much of the surface area, but it's good enough for now, and already found #1 and #2.

Panic when trying to load malformed filesystem

2

```rust fn main() { let data = b"\x00\xfe\xf7\xf7\xf7\xf7\xf7\xf7\xb7\xf7\x00\x00\x02\x10\x00\xfc\x01\x00\x00\x00\x00\x00\x00\x00\x002222\x01\x00\x00\x0022222\xfc\x00\x00\x00\x00\x00\x00\x00222[[[[[21[[[[[[[[[[[[[[[[[[[[[[[222[[2222\x91\x91\x91\x91\x00\x00\x00\x00\xaa\xaa\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xb2\xb2\xb2\xb2\xb2\xb2\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xbe&\x00\x00\x00\x00\x00\x00\x00\xbez\x00\x01\x00\xd0\x00-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x012\x94\x94\x94\x94\x94\x9422222222222222222222222222\x01\x00\x00\x0022222\xe1222222222221[[[[[[[[[[[[K\x1b[[[[[[[[[[[[\x00\x00\x00\x00\x00\x00\x00\x00\x012\x94\x94\x94\x94\x94\x94\xf7\xf7\xf7\xf7\xf73\x00\xaa\xaa\x11\x03\x00\x00\x002222222222222222222222\x00\x00\x00\x00\xaa\xaa\xe7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\xf7\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\x00\x00\x00\x00\xaa\xaa\xaa\x02\x00\x98\x00\x00\x00\x002222\x01\x00\x00\x0022222\xfc\x00\x00\x00\x00\x00\x00\x00222[[[[[21[[[[[[[[[[[[[[[[[[[[[[[222[[2222\x91\x91\x91\x91\x91\x91\xd4\x91\x91\x91\x91t\x912222222222222222\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00\x01\x00\x00\x00\xaa\xaa\x9cU\xaa\xaa\x01\xaa2\xaa\xff\xff\xff\xff\xff\xff\xff\x02]\x00\x01\xff"; let storage = std::io::Cursor::new(data.to_vec()); fatfs::FileSystem::new(storage, fatfs::FsOptions::new()); } ``` This panics with a multiply overflow error.

`GeneralizedTime` encodes unaccepted value.

1

My fuzzer for this was ```rust #![no_main] use libfuzzer_sys::fuzz_target; fuzz_target!(|data: &[u8]| { if let Ok(value) = rasn::der::decode::(data) { assert_eq!(value, rasn::der::decode(&rasn::der::encode(&value).unwrap()).unwrap()); } }); ``` Not sure if this a valid round...

I'm not sure if the OSS-fuzz integration can handle `data` not being a `&[u8]`, but `cargo-fuzz` can. (It looks like they just use `cargo fuzz`, so it should work.) This...

Use markdown to format post and comment text

11

Some things like links can't be done, but the majority of the syntax used can be rendered fine on a terminal. Should probably use an existing markdown implementation and either...

```rust use tera::{Context, Tera}; fn main() { let data = "{{x::y()+0}}"; let _ = Tera::one_off(&data, &Context::new(), true); } ``` Gives ``` thread 'main' panicked at 'internal error: entered unreachable code:...

Bump itoa version, don't use mem::uninit (0.13 backport)

4

Marking this as a draft for now while I test some crates, patching their `hyper` version to be this one then seeing if a `cargo update` fixes them with strict...

Background: In https://github.com/rust-lang/rust/issues/66151 we're adding more strict checks in order to detect invalid use of `mem::uninitialized`/`mem::zeroed`, and older versions of hyper run into this check, so it would be good...

New `[suspicious_arguments]` lint for possibly swapped arguments

4

changelog: [`suspicious_arguments`]: add lint for probably accidentally swapped arguments ---