codesake-dawn 0.70 → 0.72

data/codesake-dawn.gemspec

@@ -22,6 +22,7 @@ Gem::Specification.new do |gem|
   gem.add_dependency 'haml'
   gem.add_dependency 'parser'
   gem.add_dependency 'ptools'
+  gem.add_dependency 'ruby_parser'
 
   gem.add_dependency ('coveralls')
 

data/lib/codesake/dawn/core.rb

@@ -2,10 +2,12 @@ module Codesake
   module Dawn
     class Core
       def self.detect_mvc(target)
-        gemfile_lock =  File.join(target, "Gemfile.lock")
-        raise ArgumentError.new("no Gemfile.lock in #{target}") unless File.exist?(gemfile_lock)
+        my_dir = Dir.pwd
+        Dir.chdir(target) 
+        raise ArgumentError.new("no Gemfile.lock in #{target}") unless File.exist?("Gemfile.lock")
 
-        lockfile = Bundler::LockfileParser.new(Bundler.read_file(gemfile_lock))
+        lockfile = Bundler::LockfileParser.new(Bundler.read_file("Gemfile.lock"))
+        Dir.chdir(my_dir)
         lockfile.specs.each do |s|
           return Codesake::Dawn::Rails.new(target)    if s.name == "rails"
           # return Codesake::Dawn::Padrino.new  if s.name == "padrino"

data/lib/codesake/dawn/engine.rb

@@ -218,7 +218,11 @@ module Codesake
       end
 
       def count_vulnerabilities
-        @vulnerabilities.count + @reflected_xss.count
+        ret = 0 
+        ret = @vulnerabilities.count unless @vulnerabilities.nil?
+        ret +=  @reflected_xss.count unless @reflected_xss.nil?
+
+        ret
       end
 
       private
@@ -230,7 +234,7 @@ module Codesake
       def get_rvm_ruby_ver
         return {:version=>"", :patchlevel=>""} unless File.exist?(File.join(@target, ".ruby-version"))
         hash = File.read('.ruby-version').split('-')
-        return {:version=>hash[1], :patchlevel=>hash[2]}
+        return {:version=>hash[0], :patchlevel=>hash[1]}
       end
 
     end

data/lib/codesake/dawn/kb/pattern_match_check.rb

@@ -18,7 +18,11 @@ module Codesake
         def vuln?
           Dir.glob(File.join("#{root_dir}", "*")).each do |filename|
             matches = []
-            matches = run(load_file(filename)) if File.exists?(filename) and File.file?(filename) and ! File.binary?(filename)
+            begin
+              matches = run(load_file(filename)) if File.exists?(filename) and File.file?(filename) and ! File.binary?(filename)
+            rescue ArgumentError => e
+              puts "Skipping pattern match check for #{filename}: #{e.message}"
+            end
             @evidences << {:filename=>filename, :matches=>matches} unless matches.empty?
           end
           return ! @evidences.empty?

data/lib/codesake/dawn/sinatra.rb

@@ -108,6 +108,7 @@ module Codesake
 
       def detect_views
         build_view_array(File.join(self.target, "views")) if File.exist?(File.join(self.target, "views"))
+        []
       end
 
       # e = Haml::Engine.new(File.read(template))

data/lib/codesake/dawn/version.rb

@@ -1,5 +1,5 @@
 module Codesake
   module Dawn
-    VERSION = "0.70"
+    VERSION = "0.72"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: codesake-dawn
 version: !ruby/object:Gem::Version
-  version: '0.70'
+  version: '0.72'
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-06-19 00:00:00.000000000 Z
+date: 2013-06-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: codesake_commons
@@ -91,6 +91,22 @@ dependencies:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: ruby_parser
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: coveralls
   requirement: !ruby/object:Gem::Requirement
@@ -463,7 +479,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: -4262732666483923590
+      hash: 1262204685284581406
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements:
@@ -472,7 +488,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: -4262732666483923590
+      hash: 1262204685284581406
 requirements: []
 rubyforge_project: 
 rubygems_version: 1.8.25