Sha256: 929e4350f9b44e7407d3f3f23936c4c9a0cfa509c2cb2ad4a8ae85f35805a15f
Contents?: true
Size: 1.33 KB
Versions: 4
Compression:
Stored size: 1.33 KB
Contents
require 'spec_helper'
describe "The CVE-2016-6317 vulnerability" do
before(:all) do
@check = Dawn::Kb::CVE_2016_6317.new
# @check.debug = true
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"activerecord", :version=>"4.2.7.0"}]
expect(@check.vuln?).to eq(true)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"activerecord", :version=>"4.2.7.1"}]
expect(@check.vuln?).to eq(false)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"activerecord", :version=>"4.1.0"}]
expect(@check.vuln?).to eq(false)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"activerecord", :version=>"3.1.0"}]
expect(@check.vuln?).to eq(false)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"activerecord", :version=>"2.1.0"}]
expect(@check.vuln?).to eq(false)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"activerecord", :version=>"1.1.0"}]
expect(@check.vuln?).to eq(false)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"activerecord", :version=>"5.0.0"}]
expect(@check.vuln?).to eq(false)
end
end
Version data entries
4 entries across 4 versions & 1 rubygems