veracode 1.0.0.alpha10 → 1.0.0.alpha17

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 9d4c42c7f7bb1f062f0a4bd9b9fb0ccbde47bd47
-  data.tar.gz: 3f265d90ae401b96eeb16b922eb0b362a547d52c
+SHA256:
+  metadata.gz: e5cb7c4ca35c0ba950a80cd3128abe49464b68357d59528a09af7e17998bf2d9
+  data.tar.gz: fea0072496133717cc1f109cfe987eee7ee6099443c6032efd594c823338353f
 SHA512:
-  metadata.gz: a6fc4d6e61099492949241b59e6ff73d268656f97ae01c890331afe78a16758a67fcb7c190cd745ee80e123e92e86ea7f66e5345e1e5fe8175a7d1714c272c73
-  data.tar.gz: 4de1b27795a483f2fee83076ea038f43d082cef21bfdb6acfbf772026864c429a8d3e5e895914b75e5543184eb77ed553c11084d0ee797b9b86cff8006e8a31a
+  metadata.gz: 955ceacaea17f867fbbacbeb50607cdf71c4392474e71d73c5a3ba2c585139fef63ea6b73cc1fd6713a078e76c2855465f65a9a567d066a654989a3fdac9caf7
+  data.tar.gz: 0700d727fe2b5a19ebec8ba118e6d4438473e3234ffbd3fa26520f7cce054fd9fd5cd5c20d1d09e550bbcb417708cccf1019ad24a784f3e6b59a8fbea30de1a9

data/bin/veracode

@@ -23,8 +23,13 @@ require 'veracode/version'
 $options =  {
               :archive_source => true,
               :include_inherited => false,
-              :jruby => false,
               :environment => false,
+              :verbose => false,
+              :jruby => false,
+              :skipactiverecord => false,
+              :skipactionview => false,
+              :skipsprockets => false,
+              :snapshot => false
             }
 
 subcommand = ARGV.shift
@@ -41,6 +46,18 @@ case subcommand
         $options[:jruby] = true
       end
 
+      opts.on("-O", "--skip-active-record", "Skip ActiveRecord") do
+        $options[:skipactiverecord] = true
+      end
+
+      opts.on("-V", "--skip-action-view", "Skip ActionView") do 
+        $options[:skipactionview] = true
+      end
+
+      opts.on("-S", "--skip-sprockets", "Skip Sprockets") do
+        $options[:skipsprockets] = true
+      end
+
       # opts.on("--[no-]source", "[Don't] Include source code in archive") do |s|
       #   $options[:archive_source] = s
       # end
@@ -49,6 +66,10 @@ case subcommand
         $DEBUG = true
       end
 
+      opts.on("--debug-snapshot", "Generate a snapshot of the prepare state for Veracode debugging.") do 
+        $options[:snapshot] = true
+      end
+
     end.parse!
 
     Veracode.prepare

data/lib/veracode.rb

@@ -202,7 +202,11 @@ module Veracode
       exit
     end
 
-    puts "Please upload #{@archive_filename}"
+    if $options[:snapshot]
+      puts "Please provide #{@archive_filename} to veracode for further investigation."
+    else
+      puts "Please upload #{@archive_filename}"
+    end
   end
 
   def self.cleanup
@@ -419,20 +423,25 @@ module Veracode
   ##############################################################################
   # Archiving Headers
   def self.class_header(c)
-    return "" unless c.is_a? Class
+    begin
+      return "" unless c.is_a? Class
 
-    puts "  class header" if $options[:verbose]
+      puts "  class header" if $options[:verbose]
 
-    case
-    when c.superclass.nil? # this should only happen for BasicObject
+      case
+      when c.superclass.nil? # this should only happen for BasicObject
+        return ""
+      when c.superclass.name.nil? # in case the parent is anonymous
+        name = c.superclass.to_s.dump
+      else
+        name = c.superclass.name.dump
+      end
+
+      "superclass #{name}\n"
+    rescue Exception => e
+      log_error e.message
       return ""
-    when c.superclass.name.nil? # in case the parent is anonymous
-      name = c.superclass.to_s.dump
-    else
-      name = c.superclass.name.dump
     end
-
-    "superclass #{name}\n"
   end
 
   def self.module_header(m)
@@ -440,14 +449,27 @@ module Veracode
 
     puts "  module header" if $options[:verbose]
 
-    ( m.included_modules.count > 0 ? 
-        m.included_modules.map {|m| "include #{m.inspect.dump}\n" }.join : 
-        ""
-    ) + 
-    ( m.respond_to?(:singleton_class) && m.singleton_class.included_modules.count > 0 ? 
-        m.singleton_class.included_modules.map {|m| "extend #{m.inspect.dump}\n" }.join : 
-        ""
-    )
+    formatted_contents = ""
+
+    begin
+      formatted_contents += ( m.included_modules.count > 0 ? 
+          m.included_modules.map {|m| "include #{m.inspect.dump}\n" }.join : 
+          ""
+        )
+    rescue Exception => e
+      log_error "Error archiving module header #{m.inspect.dump}: #{e.message}"
+    end
+
+    begin
+        formatted_contents += ( m.respond_to?(:singleton_class) && m.singleton_class.included_modules.count > 0 ? 
+            m.singleton_class.included_modules.map {|m| "extend #{m.inspect.dump}\n" }.join : 
+            ""
+          )
+    rescue Exception => e
+      log_error "Error archiving module header #{m.inspect.dump}: #{e.message}"
+    end
+
+    return formatted_contents
   end
 
 
@@ -496,51 +518,63 @@ module Veracode
       # m.respond_to?(:global_variables) was throwing exceptions
     end
 
-    %w[ public protected private ].each {|p|
-      get_methods = (p + "_instance_methods").to_sym
-      if m.respond_to?(get_methods) && m.__send__(get_methods, $options[:include_inherited]).count > 0
-        m.__send__(get_methods, $options[:include_inherited]).each do |m_symbol|
-          begin
-            method = m.instance_method(m_symbol)
-            formatted_contents += format_method(method, "#{p.to_s}_instance", with_disasm)
-          rescue Exception => e
-            log_error "Error archiving #{p.to_s} instance method #{m_symbol.to_s.dump}: #{e.message}"
+    begin
+      %w[ public protected private ].each {|p|
+        get_methods = (p + "_instance_methods").to_sym
+        if m.respond_to?(get_methods) && m.__send__(get_methods, $options[:include_inherited]).count > 0
+          m.__send__(get_methods, $options[:include_inherited]).each do |m_symbol|
+            begin
+              method = m.instance_method(m_symbol)
+              formatted_contents += format_method(method, "#{p.to_s}_instance", with_disasm)
+            rescue Exception => e
+              log_error "Error archiving #{p.to_s} instance method #{m_symbol.to_s.dump}: #{e.message}"
+            end
           end
         end
-      end
-    }
+      }
+    rescue Exception => e
+      # m.respond_to?(get_methods)
+    end
 
     formatted_contents
   end
 
   def self.object_contents(o, with_disasm=true)
-    return "" unless o.is_a? Object
+    return "" unless !o.nil? && o.is_a?(Object)
 
     puts "  object contents" if $options[:verbose]
 
     formatted_contents = ""
-
-    if o.respond_to?(:instance_variables) && o.instance_variables.count > 0
-      o.instance_variables.each do |v_symbol|
-        begin
-          v = o.instance_variable_get(v_symbol)
-          formatted_contents += format_variable(v_symbol, v, "instance")
-        rescue Exception => e
-          log_error "Error archiving instance variable #{v_symbol.to_s.dump}: #{e.message}"
-          formatted_contents += format_variable(v_symbol, :veracode_nil, "instance")
+    
+    begin
+      if o.respond_to?(:instance_variables) && o.instance_variables.count > 0
+        o.instance_variables.each do |v_symbol|
+          begin
+            v = o.instance_variable_get(v_symbol)
+            formatted_contents += format_variable(v_symbol, v, "instance")
+          rescue Exception => e
+            log_error "Error archiving instance variable #{v_symbol.to_s.dump}: #{e.message}"
+            formatted_contents += format_variable(v_symbol, :veracode_nil, "instance")
+          end
         end
       end
+    rescue Exception => e
+      log_error "Error getting :instance_variables for object #{o}: #{e.message}"
     end
 
-    if o.respond_to?(:singleton_methods) && o.singleton_methods($options[:include_inherited]).count > 0
-      o.singleton_methods($options[:include_inherited]).each do |m_symbol|
-        begin
-          m = o.method(m_symbol)
-          formatted_contents += format_method(m, "singleton", with_disasm)
-        rescue Exception => e
-          log_error "Error archiving singleton method #{m_symbol.to_s.dump}: #{e.message}"
+    begin
+      if o.respond_to?(:singleton_methods) && o.singleton_methods($options[:include_inherited]).count > 0
+        o.singleton_methods($options[:include_inherited]).each do |m_symbol|
+          begin
+            m = o.method(m_symbol)
+            formatted_contents += format_method(m, "singleton", with_disasm)
+          rescue Exception => e
+            log_error "Error archiving singleton method #{m_symbol.to_s.dump}: #{e.message}"
+          end
         end
       end
+    rescue Exception => e
+      log_error "Error getting :singleton_methods for object #{o}: #{e.message}"
     end
 
     formatted_contents
@@ -550,13 +584,12 @@ module Veracode
   ##############################################################################
   # Archiving Objects
   def self.archive(objects, with_disasm=true)
-
     objects = objects - [
-                          Veracode, 
-                          Veracode::ActiveRecord, 
-                          Veracode::ActiveRecord::Model, 
-                          Veracode::ActiveRecord::Schema,
-                         ]
+                            Veracode, 
+                            Veracode::ActiveRecord, 
+                            Veracode::ActiveRecord::Model, 
+                            Veracode::ActiveRecord::Schema,
+                           ]
 
     if $options[:verbose]
       puts "Archiving #{objects.count.to_s} objects" + (with_disasm ? " with disassembly" : "")
@@ -565,20 +598,16 @@ module Veracode
 
     objects.sort_by {|o| safe_name(o) }.each do |o|
 
-      puts "archiving #{o.class.to_s.downcase} #{quote(safe_name(o))}" if $options[:verbose]
-
-      add_to_archive "#{o.class.to_s.downcase} #{quote(safe_name(o))}\n" + 
-
-                     ( o.is_a?(Class)  ? class_header(o)  : "") + # superclass
-                     ( o.is_a?(Module) ? module_header(o) : "") + # included modules
+    puts "archiving #{o.class.to_s.downcase} #{quote(safe_name(o))}" if $options[:verbose]
 
-                     ( o.is_a?(Object) ? object_contents(o, with_disasm) : "") + 
-                     ( o.is_a?(Module) ? module_contents(o, with_disasm) : "") + 
-
-                     "end#{o.class.to_s.downcase}\n" + 
-                     "\n"
+    add_to_archive "#{o.class.to_s.downcase} #{quote(safe_name(o))}\n" + 
+                   ( o.is_a?(Class)  ? class_header(o)  : "") + # superclass
+                   ( o.is_a?(Module) ? module_header(o) : "") + # included modules
+                   ( (o.is_a?(Object) && !o.nil?) ? object_contents(o, with_disasm) : "") + 
+                   ( o.is_a?(Module) ? module_contents(o, with_disasm) : "") + 
+                   "end#{o.class.to_s.downcase}\n" + 
+                   "\n"
     end
-
   end
 
 
@@ -626,7 +655,11 @@ module Veracode
 
     assigns = {}
     view = ActionView::Base.new(view_paths, assigns)
-    controller_view = ApplicationController.new.view_context
+    begin
+        
+    rescue Exception => e
+      log_error "Unable to get controller view context (#{e.message})"
+    end
 
     templates.each { |template|
       puts "Compiling template #{template}" if $options[:verbose]
@@ -845,7 +878,17 @@ end
 
     puts "Phase 2 - Load Rails" if $options[:verbose]
     begin
-      require "rails/all"
+      if $options[:skipactiverecord] || $options[:skipactionview] || $options[:skipsprockets]
+        require "active_model/railtie"
+        require "active_record/railtie" unless $options[:skipactiverecord]
+        require "action_controller/railtie"
+        require "action_mailer/railtie"
+        require "action_view/railtie" unless $options[:skipactionview]
+        require "sprockets/railtie" unless $options[:skipsprockets]
+        require "rails/test_unit/railtie"
+      else 
+        require "rails/all"
+      end
     rescue Exception => e
       puts "Unable to require rails: #{e.message}"
       log_error "Unable to require rails: #{e.message}"
@@ -856,9 +899,9 @@ end
 
     ## Imitate script/rails
     # APP_PATH = File.expand_path('config/application')
-      # APP_PATH is already set in bin/veracode
+    # APP_PATH is already set in bin/veracode
     #require File.expand_path('../../config/boot',  __FILE__)
-      glob_require "config/boot.rb"
+     glob_require "config/boot.rb"
     #require 'rails/commands'
       # this will trigger the console to be launched
       # ARGV.clear
@@ -867,7 +910,16 @@ end
       # require 'rails/commands'
 
     ## Imitate rails/commands when console
-    cond_require 'rails/commands/console.rb'
+    if Gem::Version.new(Rails.version) >= Gem::Version.new("5.1.0")
+      cond_require 'rails/command.rb'
+      cond_require 'rails/command/actions.rb'
+      cond_require 'rails/command/base.rb'
+      cond_require 'rails/command/behavior.rb'
+      cond_require 'rails/command/environment_argument.rb'
+      cond_require 'rails/commands/console/console_command.rb'
+    else 
+      cond_require 'rails/commands/console.rb'
+    end
     # require APP_PATH # => config/application.rb
 
     glob_require "config/application.rb"
@@ -903,35 +955,46 @@ end
 
     puts "Phase 3 - Imitate Rails" if $options[:verbose]
 
-    any_new = true
-    while any_new
-      any_new = false
-      any_new |= glob_require "lib/**/*.rb"
-      any_new |= glob_require "app/**/*.rb"
-      puts "new successful requires? #{any_new.to_s}" if $options[:verbose]
-    end
+    begin
+      any_new = true
+      while any_new
+        any_new = false
+        any_new |= glob_require "lib/**/*.rb"
+        any_new |= glob_require "app/**/*.rb"
+        puts "new successful requires? #{any_new.to_s}" if $options[:verbose]
+      end
 
-    compile_templates
+      compile_templates
 
-    self.update
-    self.stats if $options[:verbose]
+      self.update
+      self.stats if $options[:verbose]
 
-    # Ensure compiled templates are fully disassembled in archive
-    @baseline_modules.delete(ActionView::CompiledTemplates)
+      # Ensure compiled templates are fully disassembled in archive
+      @baseline_modules.delete(ActionView::CompiledTemplates)
 
-    if $options[:environment]
-      puts "Processing and disassembling environment"
-      archive(@modules.reject  {|o| safe_name(o) =~ /^#<(Class|Module):0x[0-9a-f]+>/i }
-                      .reject  {|o| safe_name(o) =~ /^Veracode/ }
-                      .reject  {|o| safe_name(o) =~ /^EmptyRails/ }
-                      .reject  {|o| safe_name(o) =~ /^ActionView::CompiledTemplates$/ }, false)
-    else
-      puts "Processing Ruby and Rails classes and modules"
-      archive(@baseline_modules, false)
-      add_to_archive "\n# Phase 3 - App disassembly\n"
-      puts "Processing and disassembling #{APP_NAME} classes and modules"
-      archive(@modules - @baseline_modules, true)
-      archive_schema
+      if $options[:environment]
+        puts "Processing and disassembling environment"
+        archive(@modules.reject  {|o| safe_name(o) =~ /^#<(Class|Module):0x[0-9a-f]+>/i }
+                        .reject  {|o| safe_name(o) =~ /^Veracode/ }
+                        .reject  {|o| safe_name(o) =~ /^EmptyRails/ }
+                        .reject  {|o| safe_name(o) =~ /^ActionView::CompiledTemplates$/ }, false)
+      else
+        puts "Processing Ruby and Rails classes and modules"
+        archive(@baseline_modules, false)
+        add_to_archive "\n# Phase 3 - App disassembly\n"
+        puts "Processing and disassembling #{APP_NAME} classes and modules"
+        archive(@modules - @baseline_modules, true)
+        archive_schema
+
+      end
+
+    rescue Exception => e
+      if $options[:snapshot]
+        log_error e.message
+        log_error e.backtrace.join("\n")
+      else
+        raise
+      end
     end
 
     ## /phase 3 - require app

data/lib/veracode/version.rb

@@ -1,4 +1,4 @@
 module Veracode
-  VERSION = '1.0.0.alpha10'
+  VERSION = '1.0.0.alpha17'
   ARCHIVE_VERSION = '2012-07-04'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: veracode
 version: !ruby/object:Gem::Version
-  version: 1.0.0.alpha10
+  version: 1.0.0.alpha17
 platform: ruby
 authors:
 - Veracode
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-12-08 00:00:00.000000000 Z
+date: 2019-05-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rubyzip
@@ -55,10 +55,9 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 1.3.1
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.7.8
 signing_key: 
 specification_version: 4
 summary: Command line tool for preparing your Ruby on Rails app for submission to
   Veracode
 test_files: []
-has_rdoc: