rust-secure-code / safety-dance

Auditing crates for unsafe code which can be safely replaced

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Audit lokacore

Lokathor opened this issue · comments

Some sort of crazy idiot is claiming to have (trait bound) safe casting utilities for all sorts of stuff in their crate. Surely this is too good to be true, they must have screwed up somewhere.

https://github.com/Lokathor/lokacore

https://crates.io/crates/lokacore has at about 1 download per day on crates.io. Could be too small fish to fry.

<3

but verified safe casting is a public good, and if we can convert people to using that instead of transmute all over the place that's a safety gain that can grow quite a bit over time

I believe the safe type conversions have been split into a separate crate: https://crates.io/crates/bytemuck

This could come in handy as a safe abstraction, so auditing this is probably worthwhile.

Closing in favor of #43