1
0
Fork 0
mirror of https://github.com/fog/fog-aws.git synced 2022-11-09 13:50:52 -05:00

Merge pull request #416 from fog/lanej/CVE-2017-5946

upgrade rubyzip to >= 1.2.1
This commit is contained in:
Josh Lane 2017-11-28 10:08:41 -08:00 committed by GitHub
commit 5e8ffd8bad
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 3 deletions

View file

@ -24,7 +24,7 @@ Gem::Specification.new do |spec|
spec.add_development_dependency 'bundler', '~> 1.15'
spec.add_development_dependency 'rake', '~> 10.0'
spec.add_development_dependency 'shindo', '~> 0.3'
spec.add_development_dependency 'rubyzip', '~> 0.9.9'
spec.add_development_dependency 'rubyzip', '~> 1.2.1'
spec.add_dependency 'fog-core', '~> 1.38'
spec.add_dependency 'fog-json', '~> 1.0'

View file

@ -1,7 +1,7 @@
class AWS
class Lambda
module Formats
require 'zip/zip'
require 'zip'
GET_FUNCTION_CONFIGURATION = {
'CodeSize' => Integer,
@ -65,7 +65,7 @@ class AWS
DELETE_EVENT_SOURCE_MAPPING = GET_EVENT_SOURCE_MAPPING
def self.zip(data, filename='index.js')
data_io = Zip::ZipOutputStream.write_buffer do |zio|
data_io = Zip::OutputStream.write_buffer do |zio|
zio.put_next_entry(filename)
zio.write(data)
end