brakeman 4.4.0 → 5.0.0

data/bundle/ruby/{2.5.0/gems/ruby_parser-3.12.0/lib → 2.7.0/gems/ruby_parser-legacy-1.0.0/lib/ruby_parser/legacy}/ruby_lexer.rex.rb

@@ -2,13 +2,13 @@
 #--
 # This file is automatically generated. Do not modify it.
 # Generated by: oedipus_lex version 2.5.0.
-# Source: lib/ruby_lexer.rex
+# Source: lib/ruby_parser/legacy/ruby_lexer.rex
 #++
 
 #
 # lexical scanner definition for ruby
 
-class RubyLexer
+class RubyParser::Legacy::RubyLexer
   require 'strscan'
 
   IDENT         = /^#{IDENT_CHAR}+/o
@@ -70,9 +70,9 @@ class RubyLexer
 
   def next_token
     return process_string if lex_strterm
-    self.command_state = self.command_start
+    self.cmd_state = self.command_start
     self.command_start = false
-    self.space_seen    = false
+    self.space_seen    = false # TODO: rename token_seen?
     self.last_state    = lex_state
 
     token = nil
@@ -87,7 +87,7 @@ class RubyLexer
           when text = ss.scan(/\n|\#/) then
             process_newline_or_comment text
           when text = ss.scan(/[\]\)\}]/) then
-            process_bracing text
+            process_brace_close text
           when ss.match?(/\!/) then
             case
             when in_arg_state? && (ss.skip(/\!\@/)) then
@@ -102,7 +102,7 @@ class RubyLexer
             when ss.skip(/\.\d/) then
               action { rb_compile_error "no .<digit> floating literal anymore put 0 before dot" }
             when ss.skip(/\./) then
-              action { result :expr_dot, :tDOT, "." }
+              action { self.lex_state = :expr_beg; result :expr_dot, :tDOT, "." }
             end # group /\./
           when text = ss.scan(/\(/) then
             process_paren text
@@ -183,7 +183,7 @@ class RubyLexer
               action { result :arg_state, :tPIPE,    "|" }
             end # group /\|/
           when text = ss.scan(/\{/) then
-            process_curly_brace text
+            process_brace_open text
           when ss.match?(/\*/) then
             case
             when ss.skip(/\*\*=/) then
@@ -202,7 +202,7 @@ class RubyLexer
             when ss.skip(/\<\=/) then
               action { result :arg_state, :tLEQ, "<="     }
             when ss.skip(/\<\<\=/) then
-              action { result :arg_state, :tOP_ASGN, "<<" }
+              action { result :expr_beg,  :tOP_ASGN, "<<" }
             when text = ss.scan(/\<\</) then
               process_lchevron text
             when ss.skip(/\</) then
@@ -213,7 +213,7 @@ class RubyLexer
             when ss.skip(/\>\=/) then
               action { result :arg_state, :tGEQ, ">="     }
             when ss.skip(/\>\>=/) then
-              action { result :arg_state, :tOP_ASGN, ">>" }
+              action { result :expr_beg,  :tOP_ASGN, ">>" }
             when ss.skip(/\>\>/) then
               action { result :arg_state, :tRSHFT, ">>"   }
             when ss.skip(/\>/) then
@@ -224,7 +224,7 @@ class RubyLexer
             when expr_fname? && (ss.skip(/\`/)) then
               action { result(:expr_end, :tBACK_REF2, "`") }
             when expr_dot? && (ss.skip(/\`/)) then
-              action { result((command_state ? :expr_cmdarg : :expr_arg), :tBACK_REF2, "`") }
+              action { result((cmd_state ? :expr_cmdarg : :expr_arg), :tBACK_REF2, "`") }
             when ss.skip(/\`/) then
               action { string STR_XQUOTE, '`'; result(nil, :tXSTRING_BEG, "`") }
             end # group /\`/

data/bundle/ruby/2.7.0/gems/ruby_parser-legacy-1.0.0/lib/ruby_parser/legacy/ruby_parser.rb

@@ -0,0 +1,30 @@
+require "racc/parser"
+
+class RubyParser
+  module Legacy
+  end
+end
+
+require "ruby_parser/legacy/ruby_parser_extras"
+require "ruby_parser"
+
+class RubyParser
+  module Legacy
+    class RubyParser < ::RubyParser::Parser
+      include ::RubyParser::Legacy::RubyParserStuff
+    end
+  end
+end
+
+require "ruby_parser/legacy/ruby19_parser"
+require "ruby_parser/legacy/ruby18_parser"
+
+
+class ::RubyParser # Plug into modern system
+  VERSIONS.delete ::RubyParser::Legacy::RubyParser
+  VERSIONS.delete Ruby19Parser
+  VERSIONS.delete Ruby18Parser
+
+  class V19 < ::Ruby19Parser; end
+  class V18 < ::Ruby18Parser; end
+end

data/bundle/ruby/{2.5.0/gems/ruby_parser-3.12.0/lib → 2.7.0/gems/ruby_parser-legacy-1.0.0/lib/ruby_parser/legacy}/ruby_parser_extras.rb

@@ -1,15 +1,14 @@
 # encoding: ASCII-8BIT
 
 require "sexp"
-require "ruby_lexer"
+require "ruby_parser/legacy/ruby_lexer"
 require "timeout"
 require "rp_extensions"
 require "rp_stringscanner"
 
-module RubyParserStuff
-  VERSION = "3.12.0"
-
+module RubyParser::Legacy::RubyParserStuff
   attr_accessor :lexer, :in_def, :in_single, :file
+  attr_accessor :in_kwarg
   attr_reader :env, :comments
 
   $good20 = []
@@ -152,8 +151,10 @@ module RubyParserStuff
         when :block_arg then
           result << :"&#{arg.last}"
         when :shadow then
+          name = arg.last
+          self.env[name] = :lvar
           if Sexp === result.last and result.last.sexp_type == :shadow then
-            result.last << arg.last
+            result.last << name
           else
             result << arg
           end
@@ -332,14 +333,15 @@ module RubyParserStuff
   attr_accessor :canonicalize_conditions
 
   def initialize(options = {})
-    super()
+    # no!: super()
 
-    v = self.class.name[/1[89]|2[01]/]
+    v = self.class.name[/1[89]/]
 
-    self.lexer = RubyLexer.new v && v.to_i
+    self.lexer = RubyParser::Legacy::RubyLexer.new v && v.to_i
     self.lexer.parser = self
+    self.in_kwarg = false
 
-    @env = RubyParserStuff::Environment.new
+    @env = RubyParser::Legacy::RubyParserStuff::Environment.new
     @comments = []
 
     @canonicalize_conditions = true
@@ -472,6 +474,10 @@ module RubyParserStuff
     result
   end
 
+  def new_brace_body args, body, lineno
+    new_iter(nil, args, body).line(lineno)
+  end
+
   def argl x
     x = s(:arglist, x) if x and x.sexp_type == :array
     x
@@ -580,7 +586,7 @@ module RubyParserStuff
   end
 
   def new_defn val
-    (_, line), name, _, args, body, * = val
+    (_, line), (name, _), _, args, body, * = val
     body ||= s(:nil)
 
     result = s(:defn, name.to_sym, args)
@@ -601,7 +607,7 @@ module RubyParserStuff
   end
 
   def new_defs val
-    recv, name, args, body = val[1], val[4], val[6], val[7]
+    recv, (name, _line), args, body = val[1], val[4], val[6], val[7]
     body ||= s(:nil)
 
     result = s(:defs, recv, name.to_sym, args)
@@ -619,6 +625,10 @@ module RubyParserStuff
     result
   end
 
+  def new_do_body args, body, lineno
+    new_iter(nil, args, body).line(lineno)
+  end
+
   def new_for expr, var, body
     result = s(:for, expr, var).line(var.line)
     result << body if body
@@ -783,6 +793,10 @@ module RubyParserStuff
     node
   end
 
+  def new_rescue body, resbody
+    s(:rescue, body, resbody)
+  end
+
   def new_resbody cond, body
     if body && body.sexp_type == :block then
       body.shift # remove block and splat it in directly
@@ -875,7 +889,6 @@ module RubyParserStuff
     when :str then
       sym = s(:lit, sym.last.to_sym)
     else
-      debug20 24
       sym = s(:dsym, "", sym || s(:str, ""))
     end
     self.lexer.fixup_lineno
@@ -1145,7 +1158,7 @@ module RubyParserStuff
     result
   end
 
-  def value_expr oldnode # HACK
+  def value_expr oldnode # HACK: much more to do
     node = remove_begin oldnode
     node.line = oldnode.line if oldnode
     node[2] = value_expr node[2] if node and node.sexp_type == :if
@@ -1171,15 +1184,6 @@ module RubyParserStuff
 
   alias yyerror syntax_error
 
-  def on_error(et, ev, values)
-    super
-  rescue Racc::ParseError => e
-    # I don't like how the exception obscures the error message
-    e.message.replace "%s:%p :: %s" % [self.file, lexer.lineno, e.message.strip]
-    warn e.message if $DEBUG
-    raise
-  end
-
   class Keyword
     class KWtable
       attr_accessor :name, :state, :id0, :id1
@@ -1330,7 +1334,7 @@ module RubyParserStuff
 
     def reset
       @stack = [false]
-      warn "#{name}_stack(set): 0" if debug
+      log :reset if debug
     end
 
     def inspect
@@ -1338,41 +1342,47 @@ module RubyParserStuff
     end
 
     def is_in_state
+      log :is_in_state if debug
       @stack.last
     end
 
     def lexpop
-      warn "#{name}_stack.lexpop" if debug
       raise if @stack.size == 0
       a = @stack.pop
       b = @stack.pop
       @stack.push(a || b)
+      log :lexpop if debug
+    end
+
+    def log action
+      c = caller[1]
+      c = caller[2] if c =~ /expr_result/
+      warn "%s_stack.%s: %p at %s" % [name, action, @stack, c.clean_caller]
+      nil
     end
 
     def pop
       r = @stack.pop
-      warn "#{name}_stack.pop" if debug
-      @stack.push false if @stack.size == 0
+      @stack.push false if @stack.empty?
+      log :pop if debug
       r
     end
 
     def push val
       @stack.push val
-      return unless debug
-      c = caller.first
-      c = caller[1] if c =~ /expr_result/
-      warn "#{name}_stack(push): #{val} at line #{c.clean_caller}"
-      nil
+      log :push if debug
     end
 
-    def store
+    def store base = false
       result = @stack.dup
-      @stack.replace [false]
+      @stack.replace [base]
+      log :store if debug
       result
     end
 
     def restore oldstate
       @stack.replace oldstate
+      log :restore if debug
     end
   end
 end

data/bundle/ruby/{2.5.0/gems/safe_yaml-1.0.4 → 2.7.0/gems/safe_yaml-1.0.5}/CHANGES.md

@@ -1,3 +1,8 @@
+1.0.5
+-----
+
+- fixed [#80](https://github.com/dtao/safe_yaml/issues/80): uninitialized constant DateTime
+
 1.0.2
 -----
 

data/bundle/ruby/{2.5.0/gems/safe_yaml-1.0.4 → 2.7.0/gems/safe_yaml-1.0.5}/lib/safe_yaml/parse/date.rb

@@ -1,3 +1,5 @@
+require 'time'
+
 module SafeYAML
   class Parse
     class Date

data/bundle/ruby/2.7.0/gems/safe_yaml-1.0.5/lib/safe_yaml/store.rb

@@ -0,0 +1,39 @@
+require 'safe_yaml/load'
+require 'yaml/store'
+
+module SafeYAML
+
+  class Store < YAML::Store
+
+    # Override YAML::Store#initialize to accept additional option
+    # +safe_yaml_opts+.
+    def initialize(file_name, yaml_opts = {}, safe_yaml_opts = {})
+      @safe_yaml_opts = safe_yaml_opts
+      super(file_name, yaml_opts)
+    end
+
+    # Override YAML::Store#load to use SafeYAML.load instead of
+    # YAML.load (via #safe_yaml_load).
+    #--
+    # PStore#load is private, while YAML::Store#load is public.
+    #++
+    def load(content)
+      table = safe_yaml_load(content)
+      table == false ? {} : table
+    end
+
+    private
+
+    if SafeYAML::YAML_ENGINE == 'psych'
+      def safe_yaml_load(content)
+        SafeYAML.load(content, nil, @safe_yaml_opts)
+      end
+    else
+      def safe_yaml_load(content)
+        SafeYAML.load(content, @safe_yaml_opts)
+      end
+    end
+
+  end
+
+end

data/bundle/ruby/{2.5.0/gems/safe_yaml-1.0.4 → 2.7.0/gems/safe_yaml-1.0.5}/lib/safe_yaml/version.rb

@@ -1,3 +1,3 @@
 module SafeYAML
-  VERSION = "1.0.4"
+  VERSION = "1.0.5"
 end

data/bundle/ruby/{2.5.0/gems/sexp_processor-4.11.0 → 2.7.0/gems/sexp_processor-4.15.2}/History.rdoc

@@ -1,3 +1,70 @@
+=== 4.15.2 / 2021-01-10
+
+* 1 bug fix:
+
+  * Bumped ruby version to include < 4 (trunk).
+
+=== 4.15.1 / 2020-08-31
+
+* 1 bug fix:
+
+  * Bumped ruby version to include 3.0 (trunk).
+
+=== 4.15.0 / 2020-06-09
+
+* 1 minor enhancement:
+
+  * Added `child` and `include` to Sexp::Matcher.parse language.
+
+=== 4.14.1 / 2020-02-09
+
+* 2 bug fixes:
+
+  * Declared support for ruby 2.2+ to gemspec.
+  * Fixed alias for `not?` to `-` for ruby <= 2.4. (nard-tech).
+
+=== 4.14.0 / 2020-02-06
+
+* 4 minor enhancements:
+
+  * Added '-' as an alias for the 'not?' pattern matching command.
+  * Added Klass matcher to match on types.
+  * Added `k` shortcut for Klass & hooked into Sexp::Matcher.parse.
+  * Added any matcher to pattern parser.
+
+=== 4.13.0 / 2019-09-24
+
+* 4 minor enhancements:
+
+  * Added Sexp.q (query) and deprecated Sexp.s to distinguish better and match inspect output.
+  * Extended Sexp::Matcher::Parser to allow `not?` patterns.
+  * Extended Sexp::Matcher::Parser to cover more method names.
+  * Split out all pattern-oriented code to sexp_matcher.rb.
+
+* 1 bug fix:
+
+  * Fixed bug w/ ruby's Array#eql? and #hash not looking at ivars.
+
+=== 4.12.1 / 2019-06-03
+
+* 1 minor enhancement:
+
+  * Sexp#line now raises if setting w/ non-integer (eg nil).
+
+* 3 bug fixes:
+
+  * Fixed pt_testcase.rb for block args w/ trailing commas.
+  * Fixed pt_testcase.rb for stabby proc sexps.
+  * Simple fixes for STRICT_SEXP=1.
+
+=== 4.12.0 / 2019-03-12
+
+* 3 bug fixes:
+
+  * Fixed sexp_body to return empty sexp instead of nil when using STRICT_SEXP.
+  * STRICT_SEXP=4+ fails w/ current use of concat. Removed concat from strictness for now.
+  * Use concat internally instead of splat. Some people have 20000 node sexps! (presidentbeef)
+
 === 4.11.0 / 2018-04-05
 
 * 1 minor enhancement: