From e4a2d14c4e2da46e0069e36cbae610d9f9693622 Mon Sep 17 00:00:00 2001
From: Yihau Chen <a122092487@gmail.com>
Date: Wed, 23 Aug 2023 01:23:18 +0800
Subject: [PATCH] ci: fix audit (#32932)

* ci: bump rustls-webpki to 0.101.4

* ci: ignore RUSTSEC-2023-0052
---
 Cargo.lock              | 4 ++--
 ci/do-audit.sh          | 4 ++++
 programs/sbf/Cargo.lock | 4 ++--
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 159a006df..db41ad2a1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4649,9 +4649,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.101.2"
+version = "0.101.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "513722fd73ad80a71f72b61009ea1b584bcfa1483ca93949c8f290298837fa59"
+checksum = "7d93931baf2d282fff8d3a532bbfd7653f734643161b87e3e01e59a04439bf0d"
 dependencies = [
  "ring",
  "untrusted",
diff --git a/ci/do-audit.sh b/ci/do-audit.sh
index 039df6b63..878366693 100755
--- a/ci/do-audit.sh
+++ b/ci/do-audit.sh
@@ -30,6 +30,10 @@ cargo_audit_ignores=(
   --ignore RUSTSEC-2023-0001
 
   --ignore RUSTSEC-2022-0093
+
+  # webpki: CPU denial of service in certificate path building
+  # No fixed upgrade is available!
+  --ignore RUSTSEC-2023-0052
 )
 scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}" | $dep_tree_filter
 # we want the `cargo audit` exit code, not `$dep_tree_filter`'s
diff --git a/programs/sbf/Cargo.lock b/programs/sbf/Cargo.lock
index bd7321e5d..7bf2e3009 100644
--- a/programs/sbf/Cargo.lock
+++ b/programs/sbf/Cargo.lock
@@ -4102,9 +4102,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.101.2"
+version = "0.101.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "513722fd73ad80a71f72b61009ea1b584bcfa1483ca93949c8f290298837fa59"
+checksum = "7d93931baf2d282fff8d3a532bbfd7653f734643161b87e3e01e59a04439bf0d"
 dependencies = [
  "ring",
  "untrusted",