From 59faef5800ff515d7c30b64fc754154274376815 Mon Sep 17 00:00:00 2001 From: Small White <364772080@qq.com> Date: Thu, 7 Mar 2024 03:32:46 +0800 Subject: [PATCH] Update `mio` (#8935) ### Description This is a part of #8809 Update mio from 0.8.8 to 0.8.11. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry. The impact of this vulnerability depends on how mio is used. For some applications, invalid tokens may be ignored or cause a warning or a crash. On the other hand, for applications that store pointers in the tokens, this vulnerability may result in a use-after-free. ### Connections [named-pipes: fix receiving IOCP events after deregister #1760](https://github.com/tokio-rs/mio/pull/1760) [Windows Named pipes invalid memory access #6369](https://github.com/tokio-rs/tokio/issues/6369) Release Notes: - N/A --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 9ff2d84d277e2..98f15f8d7270b 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -5905,9 +5905,9 @@ dependencies = [ [[package]] name = "mio" -version = "0.8.8" +version = "0.8.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "927a765cd3fc26206e66b296465fa9d3e5ab003e651c1b3c060e7956d96b19d2" +checksum = "a4a650543ca06a924e8b371db273b2756685faae30f8487da1b56505a8f78b0c" dependencies = [ "libc", "log", @@ -6170,7 +6170,7 @@ dependencies = [ "kqueue", "libc", "log", - "mio 0.8.8", + "mio 0.8.11", "walkdir", "windows-sys 0.48.0", ] @@ -10076,7 +10076,7 @@ dependencies = [ "backtrace", "bytes 1.5.0", "libc", - "mio 0.8.8", + "mio 0.8.11", "num_cpus", "parking_lot 0.12.1", "pin-project-lite",