I was lucky enough to help another nifty open source utility. The developer has posted a little summary of what I found:
https://whynothugo.nl/journal/2024/10/19/vdirsyncer-status-update-2024-10-security-audit/

If you need something to sync your calendar or contacts give #vdirsyncer a go.

#rust #webdav #codeauditing

Vdirsyncer status update 2024-10: security audit

Note that while Rust's Borrow Checker, Slice types, and integer overflow/underflow guards, eliminate most memory corruption bugs, there is still a chance for bugs in Rust code, especially in unsafe { } blocks. Grepping for unsafe { is like the Rust code-auditing equivalent of grepping for strcpy(.
#rust #codeauditing #appsec