ratonvirus 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4b47a31e5d403f39f0b7496a292532b2dbaa5c38fe624368b09a2cb28c949623
-  data.tar.gz: 7a37d2f6d7b20e45c417b87ea22bbadbaf434714c1ce7082c1b4a4d87b646845
+  metadata.gz: f4ccf906781401ec2e9126acf96165d278b0dce5ecf2b10cfa71373490433d98
+  data.tar.gz: dc56500ae5839a3987c47e96d05ceb9e4627c412edd953d0dbf1fc2c02069c52
 SHA512:
-  metadata.gz: a52088960f46b6e4aad10616e9f2b65ad082490bd7158484178f88cc6aa68fa76397e471fa4e791e38cd51bcca799aabdbe868656c03226a9157bb2d82be4aaa
-  data.tar.gz: 62b103a30f7711cad63d9c9095eec42f98baf372b7fe2308ee03dc3ae063a74bf458afa8026e36ac10aa184df40302a9d721eafbbd93f6fc92efcc090efd9c4c
+  metadata.gz: 830a364f9355592158d7580c8755b576ea6a591951e48832ec6d83a308d5d5b0bdcaec3822d7dd47a5120eebc264c2037762202e0f53c42c3d10781d8c67f081
+  data.tar.gz: 68562672a90dafe0d4705378cc94549d2cf64858987a14901b73607da595b747e72f0d45c52a06f9b1595aba6ab3118998ee5e23901ff438f31bdf6aa399852f

data/CHANGELOG.md

@@ -1,3 +1,17 @@
+# v0.1.2
+
+Fixed:
+
+- Backport: Issue related with scanning files with CarrierWave storage engine using remote storage engines such as Fog.
+  Related to #9
+
+
+# v0.1.1
+
+Fixed:
+
+- Rescue file not found exception for blob.download [#2](https://github.com/mainio/ratonvirus/pull/2)
+
 # v0.1.0
 
 Initial public release.

data/README.md

@@ -3,7 +3,7 @@
 Rails antivirus made easy.
 Developed by [Mainio Tech](https://www.mainiotech.fi/).
 
-[![Build Status](https://travis-ci.org/mainio/ratonvirus.svg?branch=master)](https://travis-ci.org/mainio/ratonvirus)
+[![Build Status](https://travis-ci.com/mainio/ratonvirus.svg?branch=master)](https://travis-ci.com/mainio/ratonvirus)
 [![codecov](https://codecov.io/gh/mainio/ratonvirus/branch/master/graph/badge.svg)](https://codecov.io/gh/mainio/ratonvirus)
 
 Ratonvirus allows your Rails application to rat on the viruses that your users

data/lib/ratonvirus.rb

@@ -12,6 +12,7 @@ require_relative "ratonvirus/scanner/support/callbacks"
 require_relative "ratonvirus/scanner/base"
 require_relative "ratonvirus/scanner/eicar"
 require_relative "ratonvirus/scanner/addon/remove_infected"
+require_relative "ratonvirus/storage/support/io_handling"
 require_relative "ratonvirus/storage/base"
 require_relative "ratonvirus/storage/filepath"
 require_relative "ratonvirus/storage/active_storage"

data/lib/ratonvirus/storage/carrierwave.rb

@@ -3,6 +3,8 @@
 module Ratonvirus
   module Storage
     class Carrierwave < Base
+      include Ratonvirus::Storage::Support::IoHandling
+
       def changed?(record, attribute)
         record.public_send :"#{attribute}_changed?"
       end
@@ -15,12 +17,22 @@ module Ratonvirus
         end
       end
 
-      def asset_path(asset)
+      def asset_path(asset, &block)
         return unless block_given?
         return if asset.nil?
         return if asset.file.nil?
 
-        yield asset.file.path
+        # If the file is a local SanitizedFile, it is faster to run the scan
+        # directly against that file instead of copying it to a tempfile first
+        # as below for external file storages.
+        return yield asset.file.path if asset.file.is_a?(::CarrierWave::SanitizedFile)
+
+        # The file could be externally stored, so we need to read it to memory
+        # in order to create a temporary file for the scanner to perform the
+        # scan on.
+        io = StringIO.new(asset.file.read)
+        ext = File.extname(asset.file.path)
+        io_path(io, ext, &block)
       end
 
       def asset_remove(asset)

data/lib/ratonvirus/storage/support/io_handling.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+require "tempfile"
+
+module Ratonvirus
+  module Storage
+    module Support
+      module IoHandling
+        private
+
+        # This creates a local copy of the io contents for the scanning process.
+        # A local copy is needed for processing because the io object may be a
+        # file stream in the memory which may not have a path associated with it
+        # on the filesystem.
+        def io_path(io, extension)
+          tempfile = Tempfile.open(
+            ["Ratonvirus", extension],
+            tempdir
+          )
+          # Important for the scanner to be able to access the file.
+          prepare_for_scanner tempfile.path
+
+          begin
+            tempfile.binmode
+            IO.copy_stream(io, tempfile)
+            tempfile.flush
+            tempfile.rewind
+
+            yield tempfile.path
+          ensure
+            tempfile.close!
+          end
+        end
+
+        def tempdir
+          Dir.tmpdir
+        end
+
+        def prepare_for_scanner(filepath)
+          # Important for the scanner to be able to access the file.
+          File.chmod(0o644, filepath)
+        end
+      end
+    end
+  end
+end

data/lib/ratonvirus/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Ratonvirus
-  VERSION = "0.1.1"
+  VERSION = "0.1.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ratonvirus
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Antti Hukkanen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-11-27 00:00:00.000000000 Z
+date: 2021-03-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -177,6 +177,7 @@ files:
 - lib/ratonvirus/storage/carrierwave.rb
 - lib/ratonvirus/storage/filepath.rb
 - lib/ratonvirus/storage/multi.rb
+- lib/ratonvirus/storage/support/io_handling.rb
 - lib/ratonvirus/support/backend.rb
 - lib/ratonvirus/version.rb
 - lib/tasks/ratonvirus.rake