gem-compare 1.2.0 → 1.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0caaeffb3233009f5be958ac76e97a0f1f30ff83b9029833f83129ccfb682885
-  data.tar.gz: 40747fe01a1698f048dc67e98b7d28f2a0d52cd9c9f37badeba47ea2bf8f2e3e
+  metadata.gz: '096fabc998369169bf705a75200c474ba447d3c356fe315b41e43de604cfb083'
+  data.tar.gz: d23ba898f4d201e2e02c83662c3e333b3c3b8a33ab0b4e6bc698a8acc24c0cde
 SHA512:
-  metadata.gz: 449146838c58824fb8c9a74b357a2d51ee9f90dc69a10c7e40c8cc859562accb90946114c7c090a93122d4573b9ab8ef7cc175f9543e65c5d61d9361039d97bc
-  data.tar.gz: 60a07492868fbbe221089b1cb5afe3887e9f7e47f3aeafe72c72271aaf6c9e30f2fbd99560bbc999194b040ab34d19c33d01652c8da2fc22a7e496cd8695c946
+  metadata.gz: 2c8ab50db4a790a4af27bd2ed8fe19ffc463a24af0f17e30be05d84cc4b1f2a57d9b02e0650dd6c963d088676c464985577783b92e20c2d819b44dcb3ac3f581
+  data.tar.gz: 9814f8ef072e89b299bb5ff3d952ad2247b79867b61328b6e6f50af653ee5128560a5cb271517d1073d888b5022b79fb20228d3c18bcbf94243922da628ee6c5

data/lib/rubygems/comparator/monitor.rb

@@ -47,7 +47,7 @@ class Gem::Comparator
       curr_permissions = File.stat(curr_file).mode
 
       diff = prev_permissions ^ curr_permissions
-      diff ^= 020 if ignore_group_writable
+      diff ^= 020 if diff != 0 && ignore_group_writable
 
       if diff != 0
         "  (!) New permissions: " +
@@ -59,13 +59,21 @@ class Gem::Comparator
 
     def self.new_file_permissions(file, ignore_group_writable=false)
       file_permissions = File.stat(file).mode
-      formatted_file_permissions = format_permissions(file_permissions)
 
-      file_permissions ^= 020 if ignore_group_writable
+      expected_permissions = if DirUtils.gem_bin_file?(file)
+        0100755
+      else
+        0100644
+      end
+
+      permissions_to_compare = if ignore_group_writable && file_permissions != expected_permissions
+        file_permissions ^ 020
+      else
+        file_permissions
+      end
 
-      unless file_permissions == 0100644 || \
-          (DirUtils.gem_bin_file?(file) && file_permissions == 0100755)
-        return "  (!) Unexpected permissions: #{formatted_file_permissions}"
+      unless permissions_to_compare == expected_permissions
+        return "  (!) Unexpected permissions: #{format_permissions(file_permissions)}"
       end
       ''
     end

data/lib/rubygems/comparator/version.rb

@@ -1,3 +1,3 @@
 class Gem::Comparator
-  VERSION = '1.2.0'
+  VERSION = '1.2.1'
 end

data/test/rubygems/comparator/test_file_list_comparator.rb

@@ -9,9 +9,10 @@ class TestFileListComparator < TestGemComparator
     assert_equal [], @report['files']['0.0.1->0.0.2']['deleted'].messages
     assert_equal [], @report['files']['0.0.1->0.0.2']['updated'].messages
     assert_equal "bin/lorem +3/-0", @report['files']['0.0.2->0.0.3']['added'].lines(1)
-    assert_equal "(!) File is not executable", @report['files']['0.0.2->0.0.3']['added'].lines(2).strip
-    assert_equal "(!) Shebang found: #!/usr/bin/ruby", @report['files']['0.0.2->0.0.3']['added'].lines(3).strip
-    assert_equal "lib/lorem/utils.rb +7/-0", @report['files']['0.0.2->0.0.3']['added'].lines(4).strip
+    assert_equal "(!) Unexpected permissions: 100664", @report['files']['0.0.2->0.0.3']['added'].lines(2).strip
+    assert_equal "(!) File is not executable", @report['files']['0.0.2->0.0.3']['added'].lines(3).strip
+    assert_equal "(!) Shebang found: #!/usr/bin/ruby", @report['files']['0.0.2->0.0.3']['added'].lines(4).strip
+    assert_equal "lib/lorem/utils.rb +7/-0", @report['files']['0.0.2->0.0.3']['added'].lines(5).strip
     assert_nil @report['files']['0.0.2->0.0.3']['added'].lines(6)
     assert_equal [], @report['files']['0.0.2->0.0.3']['deleted'].messages
     assert_equal [], @report['files']['0.0.2->0.0.3']['updated'].messages

data/test/rubygems/comparator/test_monitor.rb

@@ -49,6 +49,21 @@ class TestMonitor < TestGemModule
     file1 = File.join(@v003, 'bin/lorem')
     file2 = File.join(@v004, 'bin/lorem')
     assert_equal '(!) New permissions: 100664 -> 100775', Gem::Comparator::Monitor.files_permissions_changes(file1, file2).strip 
+    assert_equal '(!) New permissions: 100664 -> 100775', Gem::Comparator::Monitor.files_permissions_changes(file1, file2, true).strip
+  end
+
+  def test_files_permissions_changes_no_change
+    file1 = Tempfile.new
+    file2 = Tempfile.new
+    begin
+      File.chmod(0644, file1)
+      File.chmod(0644, file2)
+      assert_equal '', Gem::Comparator::Monitor.files_permissions_changes(file1.path, file2.path)
+      assert_equal '', Gem::Comparator::Monitor.files_permissions_changes(file1.path, file2.path, true)
+    ensure
+      file1.unlink
+      file2.unlink
+    end
   end
 
   def test_files_permissions_changes_ignores_group_writable_added
@@ -94,16 +109,39 @@ class TestMonitor < TestGemModule
     file1 = File.join(@v004, 'bin/lorem')
     file2 = File.join(@v004, 'lib/lorem.rb')
     assert_equal '(!) Unexpected permissions: 100775', Gem::Comparator::Monitor.new_file_permissions(file1).strip 
-    assert_equal '(!) Unexpected permissions: 100664', Gem::Comparator::Monitor.new_file_permissions(file2).strip 
+    assert_equal '(!) Unexpected permissions: 100664', Gem::Comparator::Monitor.new_file_permissions(file2).strip
+    ignore_group_writable = true
+    assert_equal '', Gem::Comparator::Monitor.new_file_permissions(file1, ignore_group_writable).strip
+    assert_equal '', Gem::Comparator::Monitor.new_file_permissions(file2, ignore_group_writable).strip
+  end
+
+  def test_new_file_permissions_ignore_group_writable_when_not_group_writable
+    file = Tempfile.new
+    bin_file = temp_bin_file
+    begin
+      File.chmod(0644, file)
+      assert_equal '', Gem::Comparator::Monitor.new_file_permissions(file.path, true)
+
+      File.chmod(0755, bin_file)
+      assert_equal '', Gem::Comparator::Monitor.new_file_permissions(bin_file.path, true)
+    ensure
+      file.unlink
+      bin_file.unlink
+    end
   end
 
   def test_new_file_permissions_ignore_group_writable
     file = Tempfile.new
+    bin_file = temp_bin_file
     begin
       File.chmod(0664, file)
-      assert_equal '', Gem::Comparator::Monitor.new_file_permissions(file, true)
+      assert_equal '', Gem::Comparator::Monitor.new_file_permissions(file.path, true)
+
+      File.chmod(0775, bin_file)
+      assert_equal '', Gem::Comparator::Monitor.new_file_permissions(bin_file.path, true)
     ensure
       file.unlink
+      bin_file.unlink
     end
   end
 

data/test/test_helper.rb

@@ -11,6 +11,12 @@ def setup_file_permissions
   File.chmod(0775, File.join(gemfiles_path, 'lorem-0.0.4', 'bin', 'lorem'))
 end
 
+def temp_bin_file
+  bin_dir = File.join(Dir.mktmpdir, "bin")
+  Dir.mkdir(bin_dir)
+  Tempfile.new("", bin_dir)
+end
+
 class TestGemComparator < Minitest::Test
   def setup
     super

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gem-compare
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.2.1
 platform: ruby
 authors:
 - Josef Stribny
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-07-17 00:00:00.000000000 Z
+date: 2022-07-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json