Closed gnattishness closed 2 weeks ago
I can add 2) as a separate issue if you'd prefer :slightly_smiling_face:
Maintaining compatibility with the latest rust-toolchain for ityfuzz is challenging, because not all dependencies are compatible with the latest version or upgrading them would introduce breaking changes. Therefore, instead of building ityfuzz with the latest rust-toolchain, use the version specified by ityfuzz which can be found at https://github.com/fuzzland/ityfuzz/blob/master/rust-toolchain.toml.
You can install ityfuzz in two ways:
curl -L https://ity.fuzz.land/ | bash
ityfuzzup
cargo +nightly-2024-01-01 install --git https://github.com/fuzzland/ityfuzz --locked
Building master (960e9e1) with a recent version of nightly (rustc 1.81.0-nightly (8337ba918 2024-06-12)) fails:
This appears to be due to the issue explained in https://github.com/time-rs/time/issues/681 and resolved in https://github.com/time-rs/time/pull/671
To resolve
Please update
time
in the Cargo.lock e.g.cargo update --package time
It looks like this wasn't caught in CI and workflows, suggesting that the Cargo.lock isn't being relied on there: https://github.com/fuzzland/ityfuzz/blob/960e9e148d376615df776529ddaedba93af0dced/.github/workflows/release.yml#L153 Please consider adding a
--locked
or--frozen
to the build command, to ensure repeatable/reproducible builds.