rust-random / rand

A Rust library for random number generation.
https://crates.io/crates/rand
Other
1.6k stars 423 forks source link

rand_core-0.6.4 tag missing #1423

Closed VorpalBlade closed 3 months ago

VorpalBlade commented 3 months ago

I started investigating (using cargo-goggles) if crates.io packages match git tags after the recent xz backdoor. I found that rand_core-0.6.4 has no matching tag in this repo. And at the plain tag 0.6.4, the code does not match (completely different version of rand_core).

dhardy commented 3 months ago

I don't have a record of what this is either; it would take some guessing and testing.

The unprefixed tags are for the rand crate which does not share version numbers (or at least, did not use to), so won't be much help here (the latest rand v0.8.5 is also older than rand_core 0.6.4).

VorpalBlade commented 3 months ago

I believe there should be a hidden file in the crate with the revision (unless --allow-dirty was used). I'm on my phone right now, so can't check. But if it exists, it should allow reconstruction of the tag from that.

dhardy commented 3 months ago

Tagged.