RUSTSEC-2024-0436: paste - no longer maintained

[cemoktra]

https://rustsec.org/advisories/RUSTSEC-2024-0436.html

Are there any plans on migrating away from the use of paste crate?

[romancardenas]

While no longer maintained, paste is a well-known crate with a complete utility. Personally, I'd rather leave it as is. If we happen to find a malfunction/need an additional feature, we can consider moving to a different crate.

[KushalMeghani1644]

What about moving to pastey ? (https://crates.io/crates/pastey) it seems like a successor to the now unmaintained paste crate.

paste is a well-known crate with a complete utility.

IMHO it wouldn't be a good idea to use a crate that's unmaintained even if its well-known because doesn't that leave like a door open for some vulnerabilities (like supply-chain attacks or something?) and also if someday a new version of rust breaks the way paste crate works, then?

[romancardenas]

That is why we keep a CI/CD pipeline. When that day comes, we can consider moving to pastey or other possibilities.

In any case, feel free to open up a PR so we can discuss the implications of such changes there.

[cemoktra]

 git diff
riscv-peripheral/Cargo.toml --- TOML
15                                                    15
16 [dependencies]                                     16 [dependencies]
17 embedded-hal = "1.0.0"                             17 embedded-hal = "1.0.0"
18 paste = "1.0"                                      18 pastey = "0.2.2"
19 riscv = { path = "../riscv", version = "0.16.0" }  19 riscv = { path = "../riscv", version = "0.16.0" }
20                                                    20
21 [package.metadata.docs.rs]                         21 [package.metadata.docs.rs]

riscv-peripheral/src/macros.rs --- Rust
1 //! Utility macros for generating standard peripherals-  1 //! Utility macros for generating standard peripherals-
. related code in RISC-V PACs.                             . related code in RISC-V PACs.
2                                                          2
3 pub use paste::paste;                                    3 pub use pastey::paste;
4                                                          4
5 /// Macro to create interfaces to CLINT peripherals in   5 /// Macro to create interfaces to CLINT peripherals in
. PACs.                                                    . PACs.
6 /// The resulting struct will provide safe access to th  6 /// The resulting struct will provide safe access to th
. e CLINT registers.