ilios 1.1.0 → 1.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 35886070e9a98cd40ab1628296e5f2a1cf50fcd5f8429ade4d79eeb0a363cf29
-  data.tar.gz: e6b9d75e242db36c5fc96774fbf2dd31a135b3702ccaedc57e3efb07cd1fa22b
+  metadata.gz: 2b605b28e1524aca634a188b28f9f557745673a789912e4971f173f5687d7ef6
+  data.tar.gz: 46cc89d6f8f096f926339f2e9d14e76b72858167a9332d4e53ba1800fe10f527
 SHA512:
-  metadata.gz: 2219b69eef45cc7977f79354bf4e03fc8e7583f59ed91dc4290653a0e1a0ea669d9b5dd1225b8cb043203824d3c6d4bf5294baee658e3f07d8ac04be87422c3c
-  data.tar.gz: 7e7919c71dd7d876f84331ad33f2b66a9c0831bd5b342eaf766a6e6794e018183b1ba48e798eebb1305480031464c426c11ee79ec490d2d5fec56d826239cf14
+  metadata.gz: d7008c470792420f2ff04f03c7d48d4f267a89de816f90d1381ccef7f0c19a7a5623067c916ba58c2a3dd14e4698e68822313692b0a7e19f1e6275803297e4ce
+  data.tar.gz: 2c073c1b1b2e8227579bfd5b9e1847d4124f379615e236bf573a15a971aa55a9a26e920efa3f8e857363465cab24af2d17e49730a33043a45299f0907d81dbd6

data/CHANGELOG.md

@@ -1,11 +1,16 @@
 # Change Log
 
+## 1.1.1
+
+- Fix out-of-bounds read when binding a `list`/`set` whose element mutates the array while it is being converted (#31)
+- Verify the sha256 checksum of the libuv and cpp-driver archives downloaded at build time (#32)
+
 ## 1.1.0
 
 - Support Cassandra collection types (`list`, `set` and `map`, including nested collections). `list` maps to `Array`, `set` to `Set`, `map` to `Hash` (#28)
 - Accept `Symbol` values for `text`/`ascii`/`varchar` columns and collection elements (#28)
 - Require Ruby 3.4 or later (#28)
-- Fix `Ilios::Cassandra::Future#await` returning before the registered callback ran (PR #29)
+- Fix `Ilios::Cassandra::Future#await` returning before the registered callback ran (#29)
 
 ## 1.0.6
 

data/Gemfile

@@ -9,10 +9,11 @@ gem 'extconf_compile_commands_json'
 gem 'minitest', '~> 5.20'
 gem 'rake', '~> 13.0'
 gem 'rake-compiler', '~> 1.2'
-gem 'rbs', '~> 3.4'
+gem 'rbs', '~> 4.0'
 gem 'rubocop', '~> 1.57'
 gem 'rubocop-minitest', '~> 0.33'
+gem 'rubocop-on-rbs', '~> 2.0'
 gem 'rubocop-performance', '~> 1.19'
 gem 'rubocop-rake', '~> 0.6'
 
-gem 'rubocop-on-rbs', '~> 1.5'
+gem 'ruby_memcheck', '~> 3.0' if RUBY_PLATFORM.include?('linux')

data/Rakefile

@@ -13,9 +13,10 @@ Rake::ExtensionTask.new('ilios') do |ext|
   ext.ext_dir = 'ext/ilios'
 end
 
-Rake::TestTask.new do |task|
-  task.pattern = 'test/test_*.rb'
+test_config = lambda do |t|
+  t.pattern = 'test/test_*.rb'
 end
+Rake::TestTask.new(test: :compile, &test_config)
 
 namespace :rbs do
   desc 'Validate RBS definitions'
@@ -26,3 +27,11 @@ namespace :rbs do
     end
   end
 end
+
+if RUBY_PLATFORM.include?('linux')
+  require 'ruby_memcheck'
+
+  namespace :test do
+    RubyMemcheck::TestTask.new(valgrind: :compile, &test_config)
+  end
+end

data/ext/ilios/extconf.rb

@@ -35,7 +35,8 @@ module LibuvInstaller
     unless File.exist?(LIBUV_INSTALL_PATH)
       libuv_recipe = LibuvRecipe.new('libuv', Ilios::LIBUV_VERSION, make_command: "make -j #{Etc.nprocessors}")
       libuv_recipe.files << {
-        url: "https://github.com/libuv/libuv/archive/v#{Ilios::LIBUV_VERSION}.tar.gz"
+        url: "https://github.com/libuv/libuv/archive/v#{Ilios::LIBUV_VERSION}.tar.gz",
+        sha256: Ilios::LIBUV_SHA256
       }
       libuv_recipe.cook
       if RUBY_PLATFORM.include?('darwin')
@@ -97,7 +98,8 @@ module CassandraDriverInstaller
     unless File.exist?(CASSANDRA_CPP_DRIVER_INSTALL_PATH)
       cassandra_recipe = CassandraRecipe.new('cpp-driver', Ilios::CASSANDRA_CPP_DRIVER_VERSION, make_command: "make -j #{Etc.nprocessors}")
       cassandra_recipe.files << {
-        url: "https://github.com/datastax/cpp-driver/archive/#{Ilios::CASSANDRA_CPP_DRIVER_VERSION}.tar.gz"
+        url: "https://github.com/datastax/cpp-driver/archive/#{Ilios::CASSANDRA_CPP_DRIVER_VERSION}.tar.gz",
+        sha256: Ilios::CASSANDRA_CPP_DRIVER_SHA256
       }
       cassandra_recipe.cook
       if RUBY_PLATFORM.include?('darwin')

data/ext/ilios/statement.c

@@ -428,8 +428,8 @@ static VALUE statement_snapshot_value(const CassDataType *data_type, VALUE value
 
             length = RARRAY_LEN(array);
             snapshot = rb_ary_new_capa(length);
-            for (long i = 0; i < length; i++) {
-                rb_ary_push(snapshot, statement_snapshot_value(element_type, RARRAY_AREF(array, i)));
+            for (long i = 0; i < RARRAY_LEN(array); i++) {
+                rb_ary_push(snapshot, statement_snapshot_value(element_type, rb_ary_entry(array, i)));
             }
             return rb_ary_freeze(snapshot);
         }

data/lib/ilios/version.rb

@@ -1,12 +1,18 @@
 # frozen_string_literal: true
 
 module Ilios
-  VERSION = '1.1.0'
+  VERSION = '1.1.1'
   public_constant :VERSION
 
   CASSANDRA_CPP_DRIVER_VERSION = '2.17.1'
   public_constant :CASSANDRA_CPP_DRIVER_VERSION
 
+  CASSANDRA_CPP_DRIVER_SHA256 = 'e6ab5f5c60a916dd6c0dd9a19a883a4a1ab3d6b4e95cab925a186fecff08344e'
+  public_constant :CASSANDRA_CPP_DRIVER_SHA256
+
   LIBUV_VERSION = '1.52.1'
   public_constant :LIBUV_VERSION
+
+  LIBUV_SHA256 = '478baf2599bfbc882c355288c9cb6f92e0e7dda435fa04031fa5b607cf3f414c'
+  public_constant :LIBUV_SHA256
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ilios
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.1.1
 platform: ruby
 authors:
 - Watson
@@ -58,7 +58,7 @@ metadata:
   homepage_uri: https://github.com/Watson1978/ilios
   source_code_uri: https://github.com/Watson1978/ilios
   bug_tracker_uri: https://github.com/Watson1978/ilios/issues
-  documentation_uri: https://www.rubydoc.info/gems/ilios/1.1.0
+  documentation_uri: https://www.rubydoc.info/gems/ilios/1.1.1
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths: