rubygem-ffi/Remove-taint-support.patch

151 lines
5.1 KiB
Diff
Raw Normal View History

diff -Nur a/ext/ffi_c/AbstractMemory.c b/ext/ffi_c/AbstractMemory.c
--- a/ext/ffi_c/AbstractMemory.c 2022-01-26 16:51:07.093052671 +0800
+++ b/ext/ffi_c/AbstractMemory.c 2022-01-26 16:50:35.108522777 +0800
@@ -417,7 +417,7 @@
checkBounds(ptr, off, len);
end = memchr(ptr->address + off, 0, len);
- return rb_tainted_str_new((char *) ptr->address + off,
+ return rb_str_new((char *) ptr->address + off,
(end != NULL ? end - ptr->address - off : len));
}
@@ -453,7 +453,7 @@
for (i = 0; i < count; ++i) {
const char* strptr = *((const char**) (ptr->address + off) + i);
- rb_ary_push(retVal, (strptr == NULL ? Qnil : rb_tainted_str_new2(strptr)));
+ rb_ary_push(retVal, (strptr == NULL ? Qnil : rb_str_new2(strptr)));
}
} else {
@@ -463,7 +463,7 @@
if (strptr == NULL) {
break;
}
- rb_ary_push(retVal, rb_tainted_str_new2(strptr));
+ rb_ary_push(retVal, rb_str_new2(strptr));
}
}
@@ -542,7 +542,7 @@
checkRead(ptr);
checkBounds(ptr, off, len);
- return rb_tainted_str_new((char *) ptr->address + off, len);
+ return rb_str_new((char *) ptr->address + off, len);
}
/*
@@ -583,10 +583,6 @@
checkWrite(ptr);
checkBounds(ptr, off, len);
- if (rb_safe_level() >= 1 && OBJ_TAINTED(str)) {
- rb_raise(rb_eSecurityError, "Writing unsafe string to memory");
- return Qnil;
- }
memcpy(ptr->address + off, RSTRING_PTR(str) + idx, len);
return self;
@@ -718,7 +714,7 @@
memcpy(&tmp, ptr->address + offset, sizeof(tmp));
}
- return tmp != NULL ? rb_tainted_str_new2(tmp) : Qnil;
+ return tmp != NULL ? rb_str_new2(tmp) : Qnil;
}
static void
diff -Nur a/ext/ffi_c/Call.c b/ext/ffi_c/Call.c
--- a/ext/ffi_c/Call.c 2022-01-26 16:51:07.093052671 +0800
+++ b/ext/ffi_c/Call.c 2022-01-26 16:50:38.876585203 +0800
@@ -300,10 +300,6 @@
param->ptr = NULL;
} else {
- if (rb_safe_level() >= 1 && OBJ_TAINTED(argv[argidx])) {
- rb_raise(rb_eSecurityError, "Unsafe string parameter");
- }
-
param->ptr = StringValueCStr(argv[argidx]);
}
diff -Nur a/ext/ffi_c/DynamicLibrary.c b/ext/ffi_c/DynamicLibrary.c
--- a/ext/ffi_c/DynamicLibrary.c 2022-01-26 16:51:07.097052737 +0800
+++ b/ext/ffi_c/DynamicLibrary.c 2022-01-26 16:50:35.108522777 +0800
@@ -164,7 +164,7 @@
{
char errmsg[1024];
dl_error(errmsg, sizeof(errmsg));
- return rb_tainted_str_new2(errmsg);
+ return rb_str_new2(errmsg);
}
static void
diff -Nur a/ext/ffi_c/Function.c b/ext/ffi_c/Function.c
--- a/ext/ffi_c/Function.c 2022-01-26 16:51:07.097052737 +0800
+++ b/ext/ffi_c/Function.c 2022-01-26 16:50:42.484644979 +0800
@@ -808,7 +808,7 @@
param = rbffi_longdouble_new(*(long double *) parameters[i]);
break;
case NATIVE_STRING:
- param = (*(void **) parameters[i] != NULL) ? rb_tainted_str_new2(*(char **) parameters[i]) : Qnil;
+ param = (*(void **) parameters[i] != NULL) ? rb_str_new2(*(char **) parameters[i]) : Qnil;
break;
case NATIVE_POINTER:
param = rbffi_Pointer_NewInstance(*(void **) parameters[i]);
diff -Nur a/ext/ffi_c/Types.c b/ext/ffi_c/Types.c
--- a/ext/ffi_c/Types.c 2022-01-26 16:51:07.105052870 +0800
+++ b/ext/ffi_c/Types.c 2022-01-26 16:50:35.108522777 +0800
@@ -80,7 +80,7 @@
return rbffi_longdouble_new(*(long double *) ptr);
case NATIVE_STRING:
- return (*(void **) ptr != NULL) ? rb_tainted_str_new2(*(char **) ptr) : Qnil;
+ return (*(void **) ptr != NULL) ? rb_str_new2(*(char **) ptr) : Qnil;
case NATIVE_POINTER:
return rbffi_Pointer_NewInstance(*(void **) ptr);
case NATIVE_BOOL:
diff -Nur a/spec/ffi/string_spec.rb b/spec/ffi/string_spec.rb
--- a/spec/ffi/string_spec.rb 2019-01-06 22:25:53.000000000 +0800
+++ b/spec/ffi/string_spec.rb 2022-01-26 15:22:39.289071937 +0800
@@ -15,37 +15,11 @@
attach_function :string_null, [ ], :string
end
- it "MemoryPointer#get_string returns a tainted string" do
- mp = FFI::MemoryPointer.new 1024
- mp.put_string(0, "test\0")
- str = mp.get_string(0)
- expect(str.tainted?).to be true
- end
-
- it "String returned by a method is tainted" do
- mp = FFI::MemoryPointer.new :pointer
- sp = FFI::MemoryPointer.new 1024
- sp.put_string(0, "test")
- mp.put_pointer(0, sp)
- str = StrLibTest.ptr_ret_pointer(mp, 0)
- expect(str).to eq("test")
- expect(str).to be_tainted
- end
-
it "Poison null byte raises error" do
s = "123\0abc"
expect { StrLibTest.string_equals(s, s) }.to raise_error(ArgumentError)
end
- it "Tainted String parameter should throw a SecurityError" do
- $SAFE = 1
- str = "test"
- str.taint
- begin
- expect(LibTest.string_equals(str, str)).to be false
- rescue SecurityError
- end
- end if false
it "casts nil as NULL pointer" do
expect(StrLibTest.string_dummy(nil)).to be_nil
end