[tor-bugs] #22905 [Core Tor/Tor]: Cargo.lock and Cargo.toml specify incompatible dependencies for libc

Thu Jul 13 08:06:06 UTC 2017

#22905: Cargo.lock and Cargo.toml specify incompatible dependencies for libc
-----------------------------+--------------------------
 Reporter:  isis             |          Owner:
     Type:  defect           |         Status:  new
 Priority:  Medium           |      Milestone:
Component:  Core Tor/Tor     |        Version:
 Severity:  Normal           |     Resolution:
 Keywords:  rust, tor-build  |  Actual Points:
Parent ID:                   |         Points:
 Reviewer:                   |        Sponsor:  SponsorZ
-----------------------------+--------------------------

Comment (by Sebastian):

 The Cargo.lock file is committed on purpose, because we want reproducible
 builds. In our setup we're building an "internal" library, not something
 other people would pull in from crates.io.

 The reason we're using "*" is that dependency updates are manual always
 (they include vendoring a new thing) so accidental updates should be
 impossible, unless I'm missing something here.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22905#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online