russell@unturf.com
db29a08762
B&W print-friendly diagrams + tinkerpop-0001 + wave-3 proof sections. Squash of 94 local commits onto remote master.
61 lines
2.6 KiB
Bash
Executable file
61 lines
2.6 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# CWE-407 scan — Bundler (Ruby gem dependency resolver)
|
|
# Uses Molinillo solver; dependency graph resolution with visited tracking
|
|
# Strategy: Ruby membership patterns (include?, member?, Array#include?) in graph context
|
|
set -euo pipefail
|
|
echo "# scan=bundler host=$(hostname) date=$(date -u +%Y-%m-%dT%H:%M:%SZ)"
|
|
|
|
cd /tmp && git clone --depth 1 https://github.com/rubygems/rubygems rubygems 2>&1 | tail -1
|
|
# bundler is inside rubygems
|
|
BUNDLER=/tmp/rubygems/bundler
|
|
|
|
[ -d "$BUNDLER" ] || { echo "ERROR: bundler dir not found"; exit 1; }
|
|
|
|
# O(n) membership patterns in Ruby
|
|
RUBY_MEM='\.include\?\s*\(|\.member\?\s*\(|Array#include|\.index\s*\(|\bin\s+\[|\bselect\b.*==\b'
|
|
|
|
# Loop constructs
|
|
RUBY_LOOP='\.each\s*\{|\.each\s*do\s*\||while\s+|for\s+.*in\s+|\.map\s*\{|\.reduce\s*\{'
|
|
|
|
for dir in \
|
|
lib/bundler \
|
|
lib/bundler/resolver \
|
|
lib/bundler/graph; do
|
|
[ -d "$BUNDLER/$dir" ] || [ -d "/tmp/rubygems/$dir" ] && target_dir="/tmp/rubygems/$dir" || continue
|
|
[ -d "/tmp/rubygems/$dir" ] || continue
|
|
echo "# roots: /tmp/rubygems/$dir"
|
|
find /tmp/rubygems/$dir -name "*.rb" 2>/dev/null | sort | while IFS= read -r f; do
|
|
ml=$(grep -nE "$RUBY_MEM" "$f" 2>/dev/null | cut -d: -f1 || true)
|
|
[ -z "$ml" ] && continue
|
|
while IFS= read -r ln; do
|
|
s=$(( ln > 20 ? ln - 20 : 1 )); e=$(( ln + 20 ))
|
|
ctx=$(sed -n "${s},${e}p" "$f" 2>/dev/null || true)
|
|
graph_hit=$(echo "$ctx" | grep -iE 'graph|depend|topo|visit|cycle|dag|sort|stack|order|reachab|ancestor|transit|resolver|package|gem' | head -1 | sed 's/^\s*//' || true)
|
|
[ -z "$graph_hit" ] && continue
|
|
loop_hit=$(echo "$ctx" | grep -iE "$RUBY_LOOP" | head -1 | sed 's/^\s*//' || true)
|
|
[ -n "$loop_hit" ] && {
|
|
mem_line=$(sed -n "${ln}p" "$f" | sed 's/^\s*//')
|
|
echo "CANDIDATE\t${f}:${ln}\t${mem_line} [loop: ${loop_hit}]"
|
|
}
|
|
done <<< "$ml"
|
|
done
|
|
done
|
|
|
|
# Also scan Molinillo (bundler's solver) directly
|
|
echo "# roots: molinillo lib"
|
|
cd /tmp && git clone --depth 1 https://github.com/CocoaPods/Molinillo molinillo 2>&1 | tail -1
|
|
find /tmp/molinillo/lib -name "*.rb" 2>/dev/null | sort | while IFS= read -r f; do
|
|
ml=$(grep -nE "$RUBY_MEM" "$f" 2>/dev/null | cut -d: -f1 || true)
|
|
[ -z "$ml" ] && continue
|
|
while IFS= read -r ln; do
|
|
s=$(( ln > 20 ? ln - 20 : 1 )); e=$(( ln + 20 ))
|
|
ctx=$(sed -n "${s},${e}p" "$f" 2>/dev/null || true)
|
|
loop_hit=$(echo "$ctx" | grep -iE "$RUBY_LOOP" | head -1 | sed 's/^\s*//' || true)
|
|
[ -n "$loop_hit" ] && {
|
|
mem_line=$(sed -n "${ln}p" "$f" | sed 's/^\s*//')
|
|
echo "CANDIDATE\t${f}:${ln}\t${mem_line} [loop: ${loop_hit}]"
|
|
}
|
|
done <<< "$ml"
|
|
done
|
|
|
|
echo "# scan complete"
|