NOT ready for parsing arbitrary user input from untrusted source. about yaml-rust

[hoodie]

I think if this hasn't happened yet this lib should be subject to some fuzzing. I found an infinite loop in here once

[chyh1990]

Thanks to Rust's memory safe property, and this lib is written in pure Rust, it should be impossible to have memory problems like leaks and remote code executions.

It seems that no one have reported bugs panicking or blocking their program since last year, so I think this library can be marked as stable and production ready.

[dpc]

@dtolnay Maybe it should be mentioned on https://github.com/dtolnay/serde-yaml and in the docs, especially if it's a remote code execution.

[dtolnay]

This crate is 100% safe code outside of its dependency on linked-hash-map so I'm going to go with no remote code execution, or rather this would be more of a question for the linked-hash-map folks.

You're right serde_yaml should have propagated the same disclaimer -- fixed in dtolnay/serde-yaml@3ab6fd4.

[hoodie]

for completeness sake I'd like to add that leaks are not prevented by Rust, just data races, dangling pointers or things like use after free.