[#383997] CORE - Alternative Variable Substitution — Ilias Lazaridis <ilias@...>

ruby 1.9

21 messages 2011/06/01

[#384051] CORE - Replace "if __FILE__ == $0" with "executed?" — Ilias Lazaridis <ilias@...>

The construct to detect execution of the file (in order to launch main

12 messages 2011/06/02

[#384104] CORE - Altering Behaviour of "each do" (default param "item") — Ilias Lazaridis <ilias@...>

1.9

76 messages 2011/06/04
[#384111] Re: CORE - Altering Behaviour of "each do" (default param "item") — James Gray <james@...> 2011/06/04

On Sat, Jun 4, 2011 at 6:50 AM, Ilias Lazaridis <ilias@lazaridis.com> wrote:

[#384154] Re: CORE - Altering Behaviour of "each do" (default param "item") — Yukihiro Matsumoto <matz@...> 2011/06/05

Hi,

[#384168] Re: CORE - Altering Behaviour of "each do" (default param "item") — Ilias Lazaridis <ilias@...> 2011/06/06

On 6 撫, 01:11, Yukihiro Matsumoto <m...@ruby-lang.org> wrote:

[#384228] a little challenge - reproduce this error — Intransition <transfire@...>

Want to see a really amazing error I got this week? Okay... but to

24 messages 2011/06/08
[#384230] Re: a little challenge - reproduce this error — Steve Klabnik <steve@...> 2011/06/08

throw NameError.new("uninitialized constant X::Foo::X")

[#384231] Re: a little challenge - reproduce this error — John Feminella <johnf@...> 2011/06/08

This is a pretty trivial error to generate. Just reference the

[#384232] Re: a little challenge - reproduce this error — Intransition <transfire@...> 2011/06/08

[#384235] Re: a little challenge - reproduce this error — Christopher Dicely <cmdicely@...> 2011/06/08

On Wed, Jun 8, 2011 at 6:43 AM, Intransition <transfire@gmail.com> wrote:

[#384279] CORE - Literal Instantiation breaks Object Model — Ilias Lazaridis <ilias@...>

class String

14 messages 2011/06/09

[#384280] BARRIER - require "rubygems" — Ilias Lazaridis <ilias@...>

ruby 1.9.2p180 Windows 7

30 messages 2011/06/09

[#384283] Classic Computer Science Books — Stu <stu@...>

I wanted to start a thread discussion on classic computer science

38 messages 2011/06/09
[#384288] Re: Classic Computer Science Books — Josh Cheek <josh.cheek@...> 2011/06/10

On Thu, Jun 9, 2011 at 5:18 PM, Stu <stu@rubyprogrammer.net> wrote:

[#384289] Re: Classic Computer Science Books — Chad Perrin <code@...> 2011/06/10

On Fri, Jun 10, 2011 at 09:22:58AM +0900, Josh Cheek wrote:

[#384291] Re: Classic Computer Science Books — Stu <stu@...> 2011/06/10

Thank you for the responses. I look forward to reading others.

[#384346] Re: Classic Computer Science Books — Anurag Priyam <anurag08priyam@...> 2011/06/11

> queue to read Meyers C++ books and Crockford's Javascript: The Good

[#384349] Re: Classic Computer Science Books — Stu <stu@...> 2011/06/11

Hello Anurag

[#384430] Re: Classic Computer Science Books — Anurag Priyam <anurag08priyam@...> 2011/06/13

Hey Stu,

[#384464] Re: Classic Computer Science Books — Vin兤ius <undvinicius@...> 2011/06/14

Wow, those are a lot of books, as a beginner programmer, I don't have

[#384322] PSA: Ilias is Crazy — Ryan Davis <ryand-ruby@...>

I guess I have to post this periodically since our population is growing and changing so much.

18 messages 2011/06/10

[#384363] RFC - One word alias for require_relative — Ilias Lazaridis <ilias@...>

This is a simple Request for Comments.

161 messages 2011/06/11
[#384368] Re: RFC - One word alias for require_relative — Intransition <transfire@...> 2011/06/11

[#384654] Re: RFC - One word alias for require_relative — Ilias Lazaridis <ilias@...> 2011/06/17

On 11 撫, 20:35, Ilias Lazaridis <il...@lazaridis.com> wrote:

[#384676] Re: RFC - One word alias for require_relative — Yukihiro Matsumoto <matz@...> 2011/06/17

Hi,

[#384633] Re: RFC - One word alias for require_relative — Ilias Lazaridis <ilias@...> 2011/06/17

On 17 撫, 21:17, Gary Wright <gwtm...@mac.com> wrote:

[#384432] commit message conventions — Intransition <transfire@...>

When I write commit messages I add a "team" prefix to the message,

14 messages 2011/06/13
[#384433] Re: commit message conventions — John Feminella <johnf@...> 2011/06/13

I greatly dislike that style, to be frank. My commit messages usually

[#384467] A way to find out when a constant gets defined? — Josh Cheek <josh.cheek@...>

Hi, I'd like to be able to find out when a constant gets defined. I think I

14 messages 2011/06/14

[#384490] Messages to Ruby List/Forum/etc. not arriving equally? — Markus Fischer <markus@...>

Hi,

11 messages 2011/06/15

[#384500] CORE - Inconsistent Handling of Uninitialized Variables — Ilias Lazaridis <ilias@...>

puts "\n== Testin in MAIN Context =="

18 messages 2011/06/15

[#384617] get execution name of program — Chad Perrin <code@...>

Either $0 or __FILE__ will return a filename to give context for how a

13 messages 2011/06/17

[#384634] default config file location — Chad Perrin <code@...>

Is there a "better" way to specify a default config file location than

16 messages 2011/06/17
[#384637] Re: default config file location — "Matthew K. Williams" <matt@...> 2011/06/17

On Sat, 18 Jun 2011, Chad Perrin wrote:

[#384648] celluloid 0.0.3: a concurrent object framework for Ruby — Tony Arcieri <tony.arcieri@...>

Celluloid is a concurrent object framework for Ruby inspired by Erlang

12 messages 2011/06/17

[#384763] MIDASWAD - Matz is Dumb and so We are Dumb — Ilias Lazaridis <ilias@...>

(public draft)

46 messages 2011/06/20
[#384765] Re: MIDASWAD - Matz is Dumb and so We are Dumb — Chad Perrin <code@...> 2011/06/20

Before anyone engages this nonsense . . .

[#384772] Re: MIDASWAD - Matz is Dumb and so We are Dumb — Adam Prescott <adam@...> 2011/06/20

On 20 Jun 2011 20:32, "Chad Perrin" <code@apotheon.net> wrote:

[#384774] Re: MIDASWAD - Matz is Dumb and so We are Dumb — Sam Duncan <sduncan@...> 2011/06/20

Five posts in on this thread, and four of them are the self appointed

[#384779] Re: MIDASWAD - Matz is Dumb and so We are Dumb — David Masover <ninja@...> 2011/06/20

A quick, lazy response, because I shouldn't feed trolls anyway, and I simply

[#384788] Re: MIDASWAD - Matz is Dumb and so We are Dumb — Nikolai Weibull <now@...> 2011/06/21

On Mon, Jun 20, 2011 at 23:52, David Masover <ninja@slaphack.com> wrote:

[#384790] Re: MIDASWAD - Matz is Dumb and so We are Dumb — Adam Prescott <adam@...> 2011/06/21

On Tue, Jun 21, 2011 at 11:06 AM, Nikolai Weibull <now@bitwi.se> wrote:

[#384792] Re: MIDASWAD - Matz is Dumb and so We are Dumb — Nikolai Weibull <now@...> 2011/06/21

On Tue, Jun 21, 2011 at 13:37, Adam Prescott <adam@aprescott.com> wrote:

[#384800] How to order a hash based on its keys? — Iñaki Baz Castillo <ibc@...>

Hi, I want to order a hash using itds keys:

35 messages 2011/06/21
[#384808] Re: How to order a hash based on its keys? — Robert Klemme <shortcutter@...> 2011/06/21

On Tue, Jun 21, 2011 at 4:34 PM, Iki Baz Castillo <ibc@aliax.net> wrote:

[#384813] Re: How to order a hash based on its keys? — Iñaki Baz Castillo <ibc@...> 2011/06/21

2011/6/21 Robert Klemme <shortcutter@googlemail.com>:

[#384814] Re: How to order a hash based on its keys? — Iñaki Baz Castillo <ibc@...> 2011/06/21

2011/6/21 Iñaki Baz Castillo <ibc@aliax.net>:

[#384833] Re: How to order a hash based on its keys? — Robert Klemme <shortcutter@...> 2011/06/22

On Tue, Jun 21, 2011 at 6:34 PM, Iki Baz Castillo <ibc@aliax.net> wrote:

[#384837] Re: How to order a hash based on its keys? — Iñaki Baz Castillo <ibc@...> 2011/06/22

2011/6/22 Robert Klemme <shortcutter@googlemail.com>:

[#384843] Re: How to order a hash based on its keys? — Robert Klemme <shortcutter@...> 2011/06/22

On Wed, Jun 22, 2011 at 11:50 AM, Iki Baz Castillo <ibc@aliax.net> wrote:

[#384846] Re: How to order a hash based on its keys? — Iñaki Baz Castillo <ibc@...> 2011/06/22

2011/6/22 Robert Klemme <shortcutter@googlemail.com>:

[#384847] Re: How to order a hash based on its keys? — Robert Klemme <shortcutter@...> 2011/06/22

On Wed, Jun 22, 2011 at 3:47 PM, Iki Baz Castillo <ibc@aliax.net> wrote:

[#384849] Re: How to order a hash based on its keys? — Iñaki Baz Castillo <ibc@...> 2011/06/22

2011/6/22 Robert Klemme <shortcutter@googlemail.com>:

[#384855] Re: How to order a hash based on its keys? — Robert Klemme <shortcutter@...> 2011/06/22

On Wed, Jun 22, 2011 at 4:19 PM, Iki Baz Castillo <ibc@aliax.net> wrote:

[#384819] Gateway Shutting Down — James Gray <james@...>

Rubyists:

12 messages 2011/06/21

[#384873] Explicitly setting compiler to C++ in extconf.rb... — "Darryl L. Pierce" <mcpierce@...>

I'm trying to setup a Ruby gem that bundles the Swig-generated bindings

10 messages 2011/06/23

[#384907] SPDX (and the glazing of ones eyes) — Intransition <transfire@...>

Never ceases to amaze me how complicated "enterprisey" peoples can

17 messages 2011/06/25
[#384909] Re: SPDX (and the glazing of ones eyes) — Phillip Gawlowski <cmdjackryan@...> 2011/06/25

On Sat, Jun 25, 2011 at 5:00 PM, Intransition <transfire@gmail.com> wrote:

[#384996] A movie Renamer — Mayank Kohaley <mayank.kohaley@...>

Hello Guys,

20 messages 2011/06/29
[#385007] Re: A movie Renamer — Sam Duncan <sduncan@...> 2011/06/29

Please don't steal movies.

[#385010] Re: A movie Renamer — Chad Perrin <code@...> 2011/06/29

On Thu, Jun 30, 2011 at 06:17:55AM +0900, Sam Duncan wrote:

[#385011] Re: A movie Renamer — Sam Duncan <sduncan@...> 2011/06/29

*sigh*

[#385019] A File Renamer — Mayank Kohaley <mayank.kohaley@...>

I guess this thread has spawned another issue. Let me close this and say I

18 messages 2011/06/30
[#385021] Re: A File Renamer — Jeremy Heiler <jeremyheiler@...> 2011/06/30

On Thu, Jun 30, 2011 at 1:48 AM, Mayank Kohaley

[#385027] Re: A File Renamer — Johnny Morrice <spoon@...> 2011/06/30

> Is there a pattern to the file names you are working with? The key is

`Kernel.load`ing a file with a class definition in $SAFE = 1 under Ruby 1.9.2-p180

From: Michael Granger <ged@...>
Date: 2011-06-09 23:37:16 UTC
List: ruby-talk #384287
Hi,

[I tried posting this to StackOverflow first, so apologies to those for 
whom this is a double-post of sorts.]

I am trying to use the two-argument form of Kernel.load while running in 
safe level 1 to load a class definition inside an anonymous namespace. 
For example, the file I'm trying to Kernel.load looks like:

   # module.rb
   class Foo < Superclass
       def bar
           puts "Bar!"
       end
   end

And the test case looks like:

   # loader.rb

   BASEDIR = File.expand_path( File.dirname(__FILE__) )
   MODULE_FILE = File.join( BASEDIR, 'module.rb' ).untaint

   $stderr.puts "Module file name (%p) is %s" %
       [ MODULE_FILE, MODULE_FILE.tainted? ? "tainted" : "not tainted" ]

   class Superclass
       @subclasses = []
       class << self; attr_reader :subclasses; end
       def self::inherited( subclass )
           super
           @subclasses << subclass
       end
   end

   $stderr.puts "Ruby version: #{RUBY_DESCRIPTION}"

   $stderr.puts "In $SAFE = 0:"
   Kernel.load( MODULE_FILE, true )
   result = Superclass.subclasses.last
   p result
   $stderr.puts "Instantiating and calling its #bar method:"
   result.new.bar

   $stderr.puts "In $SAFE = 1:"
   $SAFE = 1
   Kernel.load( MODULE_FILE, true )
   result = Superclass.subclasses.last
   p result
   $stderr.puts "Instantiating and calling its #bar method:"
   result.new.bar

When I run it under Ruby 1.8.7, the output looks like:

   Module file name ("/Users/mgranger/source/ruby/misc/safeload/\
     module.rb") is not tainted
   Ruby version: ruby 1.8.7 (2009-06-12 patchlevel 174) \
     [universal-darwin10.0]
   In $SAFE = 0:
   #<Module:0x1001688d8>::Foo
   Instantiating and calling its #bar method:
   Bar!
   In $SAFE = 1:
   #<Module:0x100168090>::Foo
   Instantiating and calling its #bar method:
   Bar!

but under 1.9.2-p180, I get a SecurityError:

   Module file name ("/Users/mgranger/source/ruby/misc/safeload/\
     module.rb") is not tainted
   Ruby version: ruby 1.9.2p180 (2011-02-18 revision 30909) \
     [x86_64-darwin10.7.0]
   In $SAFE = 0:
   #<Module:0x0000010086b5b8>::Foo
   Instantiating and calling its #bar method:
   Bar!
   In $SAFE = 1:
   loader.rb:29:in `load': Insecure operation - load (SecurityError)
       from loader.rb:29:in `<main>'

The documentation for Kernel.load (from rb_f_load() in load.c) says:

      load(filename, wrap=false)   -> true

   Loads and executes the Ruby
   program in the file _filename_. If the filename does not
   resolve to an absolute path, the file is searched for in the library
   directories listed in <code>$:</code>. If the optional _wrap_
   parameter is +true+, the loaded script will be executed
   under an anonymous module, protecting the calling program's global
   namespace. In no circumstance will any local variables in the loaded
   file be propagated to the loading environment.

which (at least to me) doesn't contain any clues.

If I replace the class definition with a puts or something, it loads 
fine, but I can't seem to load a class inside an anonymous module any 
longer. Any ideas?

-- 
Michael Granger <ged@FaerieMUD.org>
Rubymage, Architect, Believer
The FaerieMUD Consortium <http://faeriemud.org/>




In This Thread

Prev Next