Merge pull request #230 from azriel91/security/upgrade-claxon

Bumped `claxon` to 0.4.2 to avoid uninitialized memory read.
This commit is contained in:
Pierre Krieger 2019-06-08 14:55:03 +02:00 committed by GitHub
commit 5f644df21b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -9,7 +9,7 @@ repository = "https://github.com/tomaka/rodio"
documentation = "http://docs.rs/rodio"
[dependencies]
claxon = { version = "0.3.0", optional = true }
claxon = { version = "0.4.2", optional = true }
cpal = "0.8"
hound = { version = "3.3.1", optional = true }
lazy_static = "1.0.0"