activesupport 3.2.22 → 3.2.22.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a9430f2c7b260f6a3e92fcb72a6bc1f24e4e05e6
-  data.tar.gz: 91faa7710848ad3250e152c3964d67ff59cababe
+  metadata.gz: 6aa4131e5399a33514ac3a65716499454d69b3c1
+  data.tar.gz: 313c081fa4954981623e6e5cfa5f9ecd8e30ed5a
 SHA512:
-  metadata.gz: e686c722964e68bb04fc372ec3759089d1fd82dc8193a18aae6c71b9bb5901f0d27bd46e1a69980b9a6fe5b464d6627b37cbd1708ff58ba0b11550d3ddb31470
-  data.tar.gz: 37129f462c828e4fb7a887c1a30368601c3340028255f6366a51f7de1ec06dbcf67d637aa8cb0f0fe50d472a3cc6b6c768bcd24d4be648496ba27a4020bd3106
+  metadata.gz: 5d72b1331458064eb84814da1f2eb43827bb1b1697784edb4646a7fc2ef86cab5e759c087c6e8396b746391aea63ddde5d710cc7e25a655b44422145714dbc24
+  data.tar.gz: c30d3076e4445f889ffe0bf13f94c01b00bc6502521722f02482bb130edd150a6c4ad3f756aa35586280bcaba3c2b80f9057cb4a844e57bea0b53452751b108b

data/lib/active_support/security_utils.rb

@@ -0,0 +1,27 @@
+require 'digest'
+
+module ActiveSupport
+  module SecurityUtils
+    # Constant time string comparison.
+    #
+    # The values compared should be of fixed length, such as strings
+    # that have already been processed by HMAC. This should not be used
+    # on variable length plaintext strings because it could leak length info
+    # via timing attacks.
+    def secure_compare(a, b)
+      return false unless a.bytesize == b.bytesize
+
+      l = a.unpack "C#{a.bytesize}"
+
+      res = 0
+      b.each_byte { |byte| res |= byte ^ l.shift }
+      res == 0
+    end
+    module_function :secure_compare
+
+    def variable_size_secure_compare(a, b) # :nodoc:
+      secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))
+    end
+    module_function :variable_size_secure_compare
+  end
+end

data/lib/active_support/version.rb

@@ -3,7 +3,7 @@ module ActiveSupport
     MAJOR = 3
     MINOR = 2
     TINY  = 22
-    PRE   = nil
+    PRE   = "1"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join('.')
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activesupport
 version: !ruby/object:Gem::Version
-  version: 3.2.22
+  version: 3.2.22.1
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-06-16 00:00:00.000000000 Z
+date: 2016-01-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n
@@ -235,6 +235,7 @@ files:
 - lib/active_support/railtie.rb
 - lib/active_support/rescuable.rb
 - lib/active_support/ruby/shim.rb
+- lib/active_support/security_utils.rb
 - lib/active_support/string_inquirer.rb
 - lib/active_support/tagged_logging.rb
 - lib/active_support/test_case.rb
@@ -287,7 +288,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5
+rubygems_version: 2.5.1
 signing_key: 
 specification_version: 4
 summary: A toolkit of support libraries and Ruby core extensions extracted from the