byteorder is a basic crate for encoding and decoding numbers in either big-endian or little-endian order.

I trust the authors. I didn't review the source code.
Published to crates.io by:: BurntSushi
High reputation and visibility in the rust community.
https://web.crev.dev/rust-reviews/people_of_rust/

byteorder is a basic crate for encoding and decoding numbers in either big-endian or little-endian order.

I trust the authors. I didn't review the source code.
Published to crates.io by:: BurntSushi
High reputation and visibility in the rust community.
https://web.crev.dev/rust-reviews/people_of_rust/

Provides methods for encoding and decoding numbers in big-endian and
little-endian order.

This is a widely used, very well tested, high quality crate.

There are two kinds of unsafe blocks:

(1) Integer/IEEE754 floating point casting. After bumping MSRV to 1.20.0
some of these can be avoided by using {f32,f64}::from_bits() from the
standard library.

(2) Slice casting (via pointers). It seems to assume that for example u32,
i32 and f32 have compatible alignment, which is probably valid. Maybe this
should be noted in a comment.

There was little delta to the 1.3.2 version, but that was checked thoroughly.

byteorder is a basic crate for encoding and decoding numbers in either big-endian or little-endian order.

I trust the authors. I didn't review the source code.
Published to crates.io by:: BurntSushi
High reputation and visibility in the rust community.
https://web.crev.dev/rust-reviews/people_of_rust/

See Full Audit

• MSRV policy!
• Basic swizzling/endian stuff
• You didn't have to write it

• Excessive and distributed unsafe in serialization related code is hard to audit and makes me nervous
• History of unsoundness. Most crate versions have alignment related bugs, and 0.2.x had overflow issues which regressed in 0.3.x.
• Very limited functionality

Part of my byteorder audit

Good test coverage, good documentation. LGTM

byteorder is a basic crate for encoding and decoding numbers in either big-endian or little-endian order.

I trust the authors. I didn't review the source code.
Published to crates.io by:: BurntSushi
High reputation and visibility in the rust community.
https://web.crev.dev/rust-reviews/people_of_rust/

Good test coverage, good documentation. LGTM

byteorder is a basic crate for encoding and decoding numbers in either big-endian or little-endian order.

I trust the authors. I didn't review the source code.
Published to crates.io by:: BurntSushi
High reputation and visibility in the rust community.
https://web.crev.dev/rust-reviews/people_of_rust/

Good test coverage, good documentation. LGTM

I spent about half an hour looking over this small crate, LGTM.

Part of my byteorder audit

Part of my byteorder audit

Part of my byteorder audit