wapiti 1.0.2 → 1.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: baf5c03cc874f5e46fd0f69315fe6cbe927e81ff4eaf2ee62b75ebbfa76b8d44
-  data.tar.gz: c354f32a52018e2f9f6ffeed4f986776a66a4c3134dc1819be5aea518a16b84d
+  metadata.gz: f114c0b381707cfc23acecf9d926afb76fad289ca7be7d58b49dda543442b1b0
+  data.tar.gz: 4caa40f31a6815cd6a2f67088b017435132dba57bc035be92d4291f3c9dff537
 SHA512:
-  metadata.gz: 4e27dd36ae949f6feab30ef999eecd1c8459848daecbf02ff6a67e12068540a94bdeae774a70eca9419d027228c35ca1310ffb3cb9e4455b9c3b174e2f7faae2
-  data.tar.gz: 43ae40741e03f345561887a45bfb3d0b2eebc7278173fc0c0edab1529d7319b0ec2c497945a04768935fd70e134261393547c924f507a9f4d75dedf89d938fd8
+  metadata.gz: 72e83e0fbd2f01a42adff73148de59006999b74a01571fa50ae8cc040c77b23a940cc39e9d397ffabc51177c487a1640d9eea0bc42da307cd16d83ede6b97eae
+  data.tar.gz: 99f8d2a5bf250dcb5ceafea3bbd7097bbcbc333708e81c3815294e43b605aba2aca401776b0eefeb90c9b1f540034854a209ecc50818847f0d1018b341fdb30f

data/HISTORY.md

@@ -1,3 +1,6 @@
+1.0.3 / 2018-07-10
+==================
+* Fix compile time format-security
 1.0.0 / 2017-12-xx
 ==================
 * Added support for Windows platform

data/ext/wapiti/extconf.rb

@@ -6,6 +6,7 @@ cflags = %w{
   -W
   -Wall
   -Wno-declaration-after-statement
+  -Werror=format-security
   -O3
 }
 

data/ext/wapiti/tools.c

@@ -79,7 +79,7 @@ __attribute__((noreturn)) void fatal(const char *fmt, ...) {
 	va_start(args, fmt);
   msg = rb_vsprintf(fmt, args);
 	va_end(args);
-	rb_raise(cNativeError, StringValueCStr(msg));
+	rb_raise(cNativeError, "%s", StringValueCStr(msg));
 }
 
 /* pfatal:
@@ -97,7 +97,7 @@ __attribute__((noreturn)) void pfatal(const char *fmt, ...) {
   msg = rb_vsprintf(fmt, args);
 	va_end(args);
 	rb_str_catf(msg, ": %s", err);
-	rb_raise(cNativeError, StringValueCStr(msg));
+	rb_raise(cNativeError, "%s", StringValueCStr(msg));
 }
 
 /* warning:

data/lib/wapiti/sequence.rb

@@ -38,6 +38,10 @@ module Wapiti
       tokens.all?(&:label?)
     end
 
+    def token_length
+      tokens.reduce(0) { |len, tk| len + tk.value.length }
+    end
+
     def label?(label)
       tokens.any? { |tk| tk.label == label }
     end

data/lib/wapiti/version.rb

@@ -1,3 +1,3 @@
 module Wapiti
-  VERSION = '1.0.2'.freeze
+  VERSION = '1.0.3'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: wapiti
 version: !ruby/object:Gem::Version
-  version: 1.0.2
+  version: 1.0.3
 platform: ruby
 authors:
 - Sylvester Keil
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-03-17 00:00:00.000000000 Z
+date: 2018-07-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: builder