ignore advisories since there's no available upgrade

This commit is contained in:
Sergio Chouhy 2026-05-07 14:02:19 -03:00
parent 8f6a519f0e
commit a1a7924c85
2 changed files with 6 additions and 2 deletions

View File

@ -14,6 +14,8 @@ ignore = [
{ id = "RUSTSEC-2025-0141", reason = "`bincode` is unmaintained but continuing to use it." },
{ id = "RUSTSEC-2023-0089", reason = "atomic-polyfill is pulled transitively via risc0-zkvm; waiting on upstream fix (see https://github.com/risc0/risc0/issues/3453)" },
{ id = "RUSTSEC-2026-0097", reason = "`rand` v0.8.5 is present transitively from logos crates, modification may break integration" },
{ id = "RUSTSEC-2026-0118", reason = "`hickory-proto` NSEC3 unbounded loop; no safe upgrade — pulled transitively via libp2p, fix requires upstream logos/libp2p update" },
{ id = "RUSTSEC-2026-0119", reason = "`hickory-proto` DNS compression DoS; pulled transitively via libp2p, fix requires upstream logos/libp2p update" },
]
yanked = "deny"
unused-ignored-advisory = "deny"

View File

@ -112,8 +112,10 @@ impl PrivateAccountKind {
Some(Self::Regular(identifier))
}
0x01 => {
let program_id: ProgramId = bytemuck::try_cast_slice(&bytes[1..33])
.expect("bytes are castable to &[u32]")
let program_id: ProgramId = bytes[1..33]
.chunks_exact(4)
.map(|chunk| u32::from_le_bytes(chunk.try_into().unwrap()))
.collect::<Vec<_>>()
.try_into()
.expect("slice has exactly 8 u32 elements");
let seed = PdaSeed::new(bytes[33..65].try_into().unwrap());