lib/codesake/dawn/kb/ruby_version_check.rb in codesake-dawn-0.79.99 vs lib/codesake/dawn/kb/ruby_version_check.rb in codesake-dawn-0.80.0
- old
+ new
@@ -27,23 +27,24 @@
ve = false
ve = self.is_same_version?(detected_ruby[:version], vv_a)
vp = is_vulnerable_patchlevel?(detected_ruby[:patchlevel], detected_ruby[:version])
- # XXX Debug statements to be replaced with logger call
debug_me("D:#{self.name}, VENGINE=#{vengine}, VV=#{vv}, VE=#{ve}, VP=#{vp}->#{vv && vengine}, #{(ve && vp && vengine )}")
debug_me("S:#{@safe_rubies}")
debug_me("DD:#{@detected_ruby}")
+
if ( vv && vengine)
@status = vp if ve
@status = true unless ve
else
@status = (ve && vp && vengine )
end
debug_me("STATUS:#{@status}")
+ self.evidences << "#{@detected_ruby[:engine]} v#{@detected_ruby[:version]}-#{@detected_ruby[:patchlevel]} detected" if @status
return @status
# return true if ( vv && vengine )
# return (ve && vp && vengine )