secure 0.3.0 → 0.4.0

data/lib/secure/child_process.rb

@@ -6,6 +6,8 @@ module Secure
       read_file.close
       @pipe = write_file
       @timeout = opts[:timeout]
+      @limit_memory = opts[:limit_memory]
+      @limit_cpu = opts[:limit_cpu]
     end
 
     def guard_threads
@@ -13,6 +15,8 @@ module Secure
     end
 
     def safely_run_block
+      Process::setrlimit(Process::RLIMIT_AS, @limit_memory) if @limit_memory
+      Process::setrlimit(Process::RLIMIT_CPU, @limit_cpu, 2 + @limit_cpu) if @limit_cpu
       thread = Thread.start do
         $SAFE=3
         yield

data/lib/secure/errors.rb

@@ -1,4 +1,7 @@
 module Secure
   class TimeoutError < StandardError
   end
+
+  class ChildKilledError < StandardError
+  end
 end

data/lib/secure/parent_process.rb

@@ -9,6 +9,8 @@ module Secure
 
     def execute
       Marshal.load(Base64.decode64(@pipe.read))
+    rescue
+      Response.error(ChildKilledError.new("Child has been killed without returning"))
     end
   end
 end

data/lib/secure/version.rb

@@ -1,3 +1,3 @@
 module Secure
-  VERSION = "0.3.0"
+  VERSION = "0.4.0"
 end

data/spec/secure/runner_spec.rb

@@ -65,6 +65,26 @@ module Secure
         response.error.should be_a(Secure::TimeoutError)
       end
 
+      if RUBY_PLATFORM =~ /darwin/
+        pending "should kill a process with too much memory (does not work on OSX)"
+      else
+        it "should kill a process with too much memory on linux" do
+          response = Runner.new(:limit_memory => 10 * 1024).run do
+            'a' * 10 * 1024
+          end
+          response.should_not be_success
+          response.error.should be_a(NoMemoryError)
+        end
+      end
+
+      it "kills a process using too much cpu" do
+        response = Runner.new(:limit_cpu => 1).run do
+          while true; end
+        end
+        response.should_not be_success
+        response.error.should be_a(Secure::ChildKilledError)
+      end
+
       it "should not be able to open a file" do
         response = Runner.new.run do
           File.open("/etc/passwd")

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: secure
 version: !ruby/object:Gem::Version 
-  hash: 19
+  hash: 15
   prerelease: 
   segments: 
   - 0
-  - 3
+  - 4
   - 0
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors: 
 - Tejas Dinkar
@@ -15,7 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2011-09-02 00:00:00 +05:30
+date: 2011-09-05 00:00:00 +05:30
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency