safe_exec 0.1.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml ADDED
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA256:
3
+ metadata.gz: 65a65d3df26d5dfbe8d29930824856b3ce020febf79614fd7c29ec9710a80493
4
+ data.tar.gz: e07f7e50651e91d65d0b132355fa43a7fee0bb32f189137f30641be300d64819
5
+ SHA512:
6
+ metadata.gz: 16d04e2ce8be13de2cd530fb2aaa74a29d34a3207fd9533f117df0976b861f4e5918a92d0a1b4dd1fbfabed8644a0a0c82c8ecbbd8985edc8f6ee662f79fe3d5
7
+ data.tar.gz: 932713fb15acd1abedd5528177f69ebbc2d2f56eb0b8fcff168904ce639d8b0c2d5625b9f5725438006a64d1e83acb2a2697048e6c605bf419c744ef3d4ad308
data/.gitignore ADDED
@@ -0,0 +1,9 @@
1
+ /.bundle/
2
+ /.yardoc
3
+ /Gemfile.lock
4
+ /_yardoc/
5
+ /coverage/
6
+ /doc/
7
+ /pkg/
8
+ /spec/reports/
9
+ /tmp/
data/.rspec ADDED
@@ -0,0 +1,2 @@
1
+ --format documentation
2
+ --color
data/.ruby-gemset ADDED
@@ -0,0 +1 @@
1
+ shexec
data/.ruby-version ADDED
@@ -0,0 +1 @@
1
+ 2.2.2
data/.travis.yml ADDED
@@ -0,0 +1,3 @@
1
+ language: ruby
2
+ rvm:
3
+ - 2.2.1
data/Gemfile ADDED
@@ -0,0 +1,4 @@
1
+ source 'https://rubygems.org'
2
+
3
+ # Specify your gem's dependencies in safe_exec.gemspec
4
+ gemspec
data/LICENSE.txt ADDED
@@ -0,0 +1,21 @@
1
+ The MIT License (MIT)
2
+
3
+ Copyright (c) 2015 Sheldon Hearn
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in
13
+ all copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
21
+ THE SOFTWARE.
data/README.md ADDED
@@ -0,0 +1,39 @@
1
+ # SafeExec
2
+
3
+ Welcome to your new gem! In this directory, you'll find the files you need to be able to package up your Ruby library into a gem. Put your Ruby code in the file `lib/safe_exec`. To experiment with that code, run `bin/console` for an interactive prompt.
4
+
5
+ TODO: Delete this and the text above, and describe your gem
6
+
7
+ ## Installation
8
+
9
+ Add this line to your application's Gemfile:
10
+
11
+ ```ruby
12
+ gem 'safe_exec'
13
+ ```
14
+
15
+ And then execute:
16
+
17
+ $ bundle
18
+
19
+ Or install it yourself as:
20
+
21
+ $ gem install safe_exec
22
+
23
+ ## Usage
24
+
25
+ TODO: Write usage instructions here
26
+
27
+ ## Development
28
+
29
+ After checking out the repo, run `bin/setup` to install dependencies. Then, run `bin/console` for an interactive prompt that will allow you to experiment.
30
+
31
+ To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release` to create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
32
+
33
+ ## Contributing
34
+
35
+ 1. Fork it ( https://github.com/[my-github-username]/safe_exec/fork )
36
+ 2. Create your feature branch (`git checkout -b my-new-feature`)
37
+ 3. Commit your changes (`git commit -am 'Add some feature'`)
38
+ 4. Push to the branch (`git push origin my-new-feature`)
39
+ 5. Create a new Pull Request
data/Rakefile ADDED
@@ -0,0 +1,7 @@
1
+ require "bundler/gem_tasks"
2
+
3
+ begin
4
+ require "rspec/core/rake_task"
5
+ RSpec::Core::RakeTask.new(:spec)
6
+ rescue LoadError
7
+ end
data/bin/console ADDED
@@ -0,0 +1,14 @@
1
+ #!/usr/bin/env ruby
2
+
3
+ require "bundler/setup"
4
+ require "safe_exec"
5
+
6
+ # You can add fixtures and/or initialization code here to make experimenting
7
+ # with your gem easier. You can also use a different console, if you like.
8
+
9
+ # (If you use this, don't forget to add pry to your Gemfile!)
10
+ # require "pry"
11
+ # Pry.start
12
+
13
+ require "irb"
14
+ IRB.start
data/bin/setup ADDED
@@ -0,0 +1,7 @@
1
+ #!/bin/bash
2
+ set -euo pipefail
3
+ IFS=$'\n\t'
4
+
5
+ bundle install
6
+
7
+ # Do any other automated setup that you need to do here
@@ -0,0 +1,13 @@
1
+ require 'safe_exec/pipe_executor'
2
+
3
+ module SafeExec
4
+
5
+ class Executor < PipeExecutor
6
+
7
+ def initialize
8
+ super(StringIO.new.tap { |io| io.close }, $stdout, $stderr)
9
+ end
10
+
11
+ end
12
+
13
+ end
@@ -0,0 +1,23 @@
1
+ require 'safe_exec/executor'
2
+
3
+ module SafeExec
4
+
5
+ class NoOutputExecutor < Executor
6
+
7
+ module NullIO
8
+ def self.write(string)
9
+ end
10
+
11
+ def self.flush
12
+ end
13
+ end
14
+
15
+ def initialize
16
+ super
17
+ @stdout = NullIO
18
+ @stderr = NullIO
19
+ end
20
+
21
+ end
22
+
23
+ end
@@ -0,0 +1,99 @@
1
+ require 'open3'
2
+ require 'timeout'
3
+ require 'thread'
4
+
5
+ module SafeExec
6
+
7
+ class PipeExecutor
8
+
9
+ PAGE_SIZE = 4096
10
+
11
+ def initialize(stdin, stdout, stderr)
12
+ @stdin, @stdout, @stderr = stdin, stdout, stderr
13
+ @mutex = Mutex.new
14
+ end
15
+
16
+ def run(cmd, *args)
17
+ assert_untainted_command(cmd, *args)
18
+ @mutex.synchronize do
19
+ Open3.popen3([cmd, cmd], *args) do |stdin, stdout, stderr, wait_thr|
20
+ @threads = [
21
+ pusher(@stdin, stdin),
22
+ drainer(stdout, @stdout),
23
+ drainer(stderr, @stderr)
24
+ ]
25
+ @threads.each { |t| t.abort_on_exception = true }
26
+
27
+ yield wait_thr if block_given?
28
+
29
+ wait_thr.value.tap { @threads.each { |t| t.join } }
30
+ end
31
+ end
32
+ end
33
+
34
+ def timeout(seconds, exception = Timeout::Error)
35
+ TimeoutDelegate.new(self, seconds, exception)
36
+ end
37
+
38
+ private
39
+
40
+ def pusher(input, output)
41
+ Thread.new do
42
+ stream(input, output)
43
+ output.close unless output.closed?
44
+ end
45
+ end
46
+
47
+ def drainer(input, output)
48
+ Thread.new do
49
+ stream(input, output)
50
+ output.flush
51
+ end
52
+ end
53
+
54
+ def stream(input, output)
55
+ until input.closed? or input.eof?
56
+ output.write input.read(PAGE_SIZE)
57
+ end
58
+ end
59
+
60
+ def assert_untainted_command(*components)
61
+ components.each do |component|
62
+ raise SecurityError.new("refusing to construct a command line from tainted component #{component}") if component.tainted?
63
+ end
64
+ end
65
+
66
+ def abort
67
+ @threads.each { |t| t.kill }
68
+ end
69
+
70
+ class TimeoutDelegate
71
+
72
+ def initialize(executor, timeout, exception)
73
+ @executor, @timeout, @exception = executor, timeout, exception
74
+ end
75
+
76
+ def run(cmd, *args)
77
+ @executor.run(cmd, *args) do |t|
78
+ begin
79
+ Timeout.timeout(@timeout, @exception) do
80
+ yield t if block_given?
81
+ t.value
82
+ end
83
+ rescue @exception => e
84
+ begin
85
+ @executor.send(:abort)
86
+ Process.kill("TERM", t.pid)
87
+ rescue Errno::ESRCH
88
+ ensure
89
+ raise e
90
+ end
91
+ end
92
+ end
93
+ end
94
+
95
+ end
96
+
97
+ end
98
+
99
+ end
@@ -0,0 +1,15 @@
1
+ require 'safe_exec/executor'
2
+
3
+ module SafeExec
4
+
5
+ class StreamingExecutor < Executor
6
+
7
+ def initialize(stdout, stderr)
8
+ super()
9
+ @stdout = stdout
10
+ @stderr = stderr
11
+ end
12
+
13
+ end
14
+
15
+ end
@@ -0,0 +1,3 @@
1
+ module SafeExec
2
+ VERSION = "0.1.0"
3
+ end
data/lib/safe_exec.rb ADDED
@@ -0,0 +1,6 @@
1
+ Dir.glob(File.join(File.dirname(__FILE__), "safe_exec", "**", "*.rb")) do |f|
2
+ require f
3
+ end
4
+
5
+ module SafeExec
6
+ end
data/safe_exec.gemspec ADDED
@@ -0,0 +1,24 @@
1
+ # coding: utf-8
2
+ lib = File.expand_path('../lib', __FILE__)
3
+ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
4
+ require 'safe_exec/version'
5
+
6
+ Gem::Specification.new do |spec|
7
+ spec.name = "safe_exec"
8
+ spec.version = SafeExec::VERSION
9
+ spec.authors = ["Sheldon Hearn"]
10
+ spec.email = ["sheldonh@starjuice.net"]
11
+
12
+ spec.summary = "Safe shell executor"
13
+ spec.homepage = "https://github.com/sheldonh/safe_exec"
14
+ spec.license = "MIT"
15
+
16
+ spec.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
17
+ spec.bindir = "exe"
18
+ spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
19
+ spec.require_paths = ["lib"]
20
+
21
+ spec.add_development_dependency "bundler", "~> 1.8"
22
+ spec.add_development_dependency "rake", "~> 10.0"
23
+ spec.add_development_dependency "rspec", "~> 3.2"
24
+ end
metadata ADDED
@@ -0,0 +1,104 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: safe_exec
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.0
5
+ platform: ruby
6
+ authors:
7
+ - Sheldon Hearn
8
+ autorequire:
9
+ bindir: exe
10
+ cert_chain: []
11
+ date: 2018-02-12 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: bundler
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '1.8'
20
+ type: :development
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '1.8'
27
+ - !ruby/object:Gem::Dependency
28
+ name: rake
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - "~>"
32
+ - !ruby/object:Gem::Version
33
+ version: '10.0'
34
+ type: :development
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - "~>"
39
+ - !ruby/object:Gem::Version
40
+ version: '10.0'
41
+ - !ruby/object:Gem::Dependency
42
+ name: rspec
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - "~>"
46
+ - !ruby/object:Gem::Version
47
+ version: '3.2'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - "~>"
53
+ - !ruby/object:Gem::Version
54
+ version: '3.2'
55
+ description:
56
+ email:
57
+ - sheldonh@starjuice.net
58
+ executables: []
59
+ extensions: []
60
+ extra_rdoc_files: []
61
+ files:
62
+ - ".gitignore"
63
+ - ".rspec"
64
+ - ".ruby-gemset"
65
+ - ".ruby-version"
66
+ - ".travis.yml"
67
+ - Gemfile
68
+ - LICENSE.txt
69
+ - README.md
70
+ - Rakefile
71
+ - bin/console
72
+ - bin/setup
73
+ - lib/safe_exec.rb
74
+ - lib/safe_exec/executor.rb
75
+ - lib/safe_exec/no_output_executor.rb
76
+ - lib/safe_exec/pipe_executor.rb
77
+ - lib/safe_exec/streaming_executor.rb
78
+ - lib/safe_exec/version.rb
79
+ - safe_exec.gemspec
80
+ homepage: https://github.com/sheldonh/safe_exec
81
+ licenses:
82
+ - MIT
83
+ metadata: {}
84
+ post_install_message:
85
+ rdoc_options: []
86
+ require_paths:
87
+ - lib
88
+ required_ruby_version: !ruby/object:Gem::Requirement
89
+ requirements:
90
+ - - ">="
91
+ - !ruby/object:Gem::Version
92
+ version: '0'
93
+ required_rubygems_version: !ruby/object:Gem::Requirement
94
+ requirements:
95
+ - - ">="
96
+ - !ruby/object:Gem::Version
97
+ version: '0'
98
+ requirements: []
99
+ rubyforge_project:
100
+ rubygems_version: 2.7.3
101
+ signing_key:
102
+ specification_version: 4
103
+ summary: Safe shell executor
104
+ test_files: []