aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJack O'Connor <[email protected]>2021-11-05 13:27:21 -0400
committerJack O'Connor <[email protected]>2021-11-05 14:38:36 -0400
commitc61c663ec5dc581a449ed03a69397c698efc4cb5 (patch)
treef9959b504974a69b5a16ade5fc020ece5ae7d6e7
parent371b5483c95be1e0250c5209d68a8536406152de (diff)
version 1.2.01.2.0
Changes since 1.1.0: - SECURITY FIX: Fixed an instance of undefined behavior in the Windows SSE2 assembly implementations, which affected both the Rust and C libraries in their default build configurations. See https://github.com/BLAKE3-team/BLAKE3/issues/206. The cause was a vector register that wasn't properly saved and restored. This bug has been present since SSE2 support was initially added in v0.3.7. The effects of this bug depend on surrounding code and compiler optimizations; see test_issue_206_windows_sse2 for an example of this bug causing incorrect hash output. Note that even when surrounding code is arranged to trigger this bug, the SSE2 implementation is normally only invoked on CPUs where SSE4.1 (introduced in 2007) isn't supported. One notable exception, however, is if the Rust library is built in `no_std` mode, with `default_features = false` or similar. In that case, runtime CPU feature detection is disabled, and since LLVM assumes that all x86-64 targets support SSE2, the SSE2 implementation will be invoked. For that reason, Rust callers who build `blake3` in `no_std` mode for x86-64 Windows targets are the most likely to trigger this bug. We found this bug in internal testing, and we aren't aware of any callers encountering it in practice. - Added the Hasher::count() method.
-rw-r--r--Cargo.toml2
-rw-r--r--b3sum/Cargo.toml2
-rw-r--r--b3sum/README.md2
-rw-r--r--c/blake3.h2
4 files changed, 4 insertions, 4 deletions
diff --git a/Cargo.toml b/Cargo.toml
index e860f6e..285171a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
[package]
name = "blake3"
-version = "1.1.0"
+version = "1.2.0"
authors = ["Jack O'Connor <[email protected]>"]
description = "the BLAKE3 hash function"
repository = "https://github.com/BLAKE3-team/BLAKE3"
diff --git a/b3sum/Cargo.toml b/b3sum/Cargo.toml
index 7e3c31a..55f9208 100644
--- a/b3sum/Cargo.toml
+++ b/b3sum/Cargo.toml
@@ -1,6 +1,6 @@
[package]
name = "b3sum"
-version = "1.1.0"
+version = "1.2.0"
authors = ["Jack O'Connor <[email protected]>"]
description = "a command line implementation of the BLAKE3 hash function"
repository = "https://github.com/BLAKE3-team/BLAKE3"
diff --git a/b3sum/README.md b/b3sum/README.md
index b3954a5..77975b4 100644
--- a/b3sum/README.md
+++ b/b3sum/README.md
@@ -5,7 +5,7 @@ A command line utility for calculating
Coreutils tools like `b2sum` or `md5sum`.
```
-b3sum 1.1.0
+b3sum 1.2.0
USAGE:
b3sum [FLAGS] [OPTIONS] [FILE]...
diff --git a/c/blake3.h b/c/blake3.h
index 74a96c0..c3ca22d 100644
--- a/c/blake3.h
+++ b/c/blake3.h
@@ -8,7 +8,7 @@
extern "C" {
#endif
-#define BLAKE3_VERSION_STRING "1.1.0"
+#define BLAKE3_VERSION_STRING "1.2.0"
#define BLAKE3_KEY_LEN 32
#define BLAKE3_OUT_LEN 32
#define BLAKE3_BLOCK_LEN 64