ccc48824cf
Removes the unused "elf" feature from the embuild dependency in firmware/zeroclaw-esp32/Cargo.toml. Vulnerability Details: - Advisory: GHSA-9cc5-2pq7-hfj8 - Package: xmas-elf < 0.10.0 - Severity: Moderate (insufficient bounds checks in HashTable access) Root Cause: - The embuild dependency (version < 0.33) relies on xmas-elf ~0.9.1 - The "elf" feature was enabled but not actually used Fix: - Removed features = ["elf"] from embuild dependency - The build.rs only uses embuild::espidf::sysenv, which doesn't require elf - xmas-elf dependency is now completely eliminated from Cargo.lock Verification: - cargo build passes successfully - grep "xmas-elf" firmware/zeroclaw-esp32/Cargo.lock confirms removal Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
35 lines
844 B
TOML
35 lines
844 B
TOML
# ZeroClaw ESP32 firmware — JSON-over-serial peripheral for host-mediated control.
|
|
#
|
|
# Flash to ESP32 and connect via serial. The host ZeroClaw sends gpio_read/gpio_write
|
|
# commands; this firmware executes them and responds.
|
|
#
|
|
# Prerequisites: espup (cargo install espup; espup install; source ~/export-esp.sh)
|
|
# Build: cargo build --release
|
|
# Flash: cargo espflash flash --monitor
|
|
|
|
[package]
|
|
name = "zeroclaw-esp32"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
license = "MIT"
|
|
description = "ZeroClaw ESP32 peripheral firmware — GPIO over JSON serial"
|
|
|
|
[dependencies]
|
|
esp-idf-svc = "0.48"
|
|
log = "0.4"
|
|
anyhow = "1.0"
|
|
serde = { version = "1.0", features = ["derive"] }
|
|
serde_json = "1.0"
|
|
|
|
[build-dependencies]
|
|
embuild = "0.31"
|
|
|
|
[profile.release]
|
|
opt-level = "s"
|
|
lto = true
|
|
codegen-units = 1
|
|
strip = true
|
|
panic = "abort"
|
|
|
|
[profile.dev]
|
|
opt-level = "s"
|