diff options
| author | Jack O'Connor <[email protected]> | 2021-11-05 13:27:21 -0400 |
|---|---|---|
| committer | Jack O'Connor <[email protected]> | 2021-11-05 14:38:36 -0400 |
| commit | c61c663ec5dc581a449ed03a69397c698efc4cb5 (patch) | |
| tree | f9959b504974a69b5a16ade5fc020ece5ae7d6e7 | |
| parent | 371b5483c95be1e0250c5209d68a8536406152de (diff) | |
version 1.2.01.2.0
Changes since 1.1.0:
- SECURITY FIX: Fixed an instance of undefined behavior in the Windows
SSE2 assembly implementations, which affected both the Rust and C
libraries in their default build configurations. See
https://github.com/BLAKE3-team/BLAKE3/issues/206. The cause was a
vector register that wasn't properly saved and restored. This bug has
been present since SSE2 support was initially added in v0.3.7. The
effects of this bug depend on surrounding code and compiler
optimizations; see test_issue_206_windows_sse2 for an example of this
bug causing incorrect hash output. Note that even when surrounding
code is arranged to trigger this bug, the SSE2 implementation is
normally only invoked on CPUs where SSE4.1 (introduced in 2007) isn't
supported. One notable exception, however, is if the Rust library is
built in `no_std` mode, with `default_features = false` or similar. In
that case, runtime CPU feature detection is disabled, and since LLVM
assumes that all x86-64 targets support SSE2, the SSE2 implementation
will be invoked. For that reason, Rust callers who build `blake3` in
`no_std` mode for x86-64 Windows targets are the most likely to
trigger this bug. We found this bug in internal testing, and we aren't
aware of any callers encountering it in practice.
- Added the Hasher::count() method.
| -rw-r--r-- | Cargo.toml | 2 | ||||
| -rw-r--r-- | b3sum/Cargo.toml | 2 | ||||
| -rw-r--r-- | b3sum/README.md | 2 | ||||
| -rw-r--r-- | c/blake3.h | 2 |
4 files changed, 4 insertions, 4 deletions
@@ -1,6 +1,6 @@ [package] name = "blake3" -version = "1.1.0" +version = "1.2.0" authors = ["Jack O'Connor <[email protected]>"] description = "the BLAKE3 hash function" repository = "https://github.com/BLAKE3-team/BLAKE3" diff --git a/b3sum/Cargo.toml b/b3sum/Cargo.toml index 7e3c31a..55f9208 100644 --- a/b3sum/Cargo.toml +++ b/b3sum/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "b3sum" -version = "1.1.0" +version = "1.2.0" authors = ["Jack O'Connor <[email protected]>"] description = "a command line implementation of the BLAKE3 hash function" repository = "https://github.com/BLAKE3-team/BLAKE3" diff --git a/b3sum/README.md b/b3sum/README.md index b3954a5..77975b4 100644 --- a/b3sum/README.md +++ b/b3sum/README.md @@ -5,7 +5,7 @@ A command line utility for calculating Coreutils tools like `b2sum` or `md5sum`. ``` -b3sum 1.1.0 +b3sum 1.2.0 USAGE: b3sum [FLAGS] [OPTIONS] [FILE]... @@ -8,7 +8,7 @@ extern "C" { #endif -#define BLAKE3_VERSION_STRING "1.1.0" +#define BLAKE3_VERSION_STRING "1.2.0" #define BLAKE3_KEY_LEN 32 #define BLAKE3_OUT_LEN 32 #define BLAKE3_BLOCK_LEN 64 |
