Multiple soundness issues
fast-float contains multiple soundness issues:
- Undefined behavior when checking input length, which has been merged but no package pubished.
- Many functions marked as safe with non-local safety guarantees
The library is also unmaintained.
Alternatives
For quickly parsing floating-point numbers third-party crates are generally no longer needed. A fast float parsing algorithm by the author of lexical has been merged into libcore. When requiring direct parsing from bytes and/or partial parsers, the fast-float2 fork of fast-float containing these security patches and reduces overall usage of unsafe.
See advisory page for additional details.
fast-float0.2.0fast-floatcontains multiple soundness issues:The library is also unmaintained.
Alternatives
For quickly parsing floating-point numbers third-party crates are generally no longer needed. A fast float parsing algorithm by the author of
lexicalhas been merged into libcore. When requiring direct parsing from bytes and/or partial parsers, thefast-float2fork offast-floatcontaining these security patches and reduces overall usage of unsafe.See advisory page for additional details.