Open erwinwolff opened 2 years ago
The built native extensions should be installed into $GEM_HOME/extensions/<platform>/<ruby-abi>/<gem-name>-<gem-version>
, but this gem installs it into $GEM_HOME/gems/<gem-name>-<gem-version>/ext/<platform>
.
Moreover, it bundles an ancient version of the http-parser library that contains multiple vulnerabilities and it doesn’t even try to use a system-provided libhttp-parser. This gem is dangerous.
I have this weird error. When I do something like this
gem install http-parser --platform=ruby
I get the output
HOWEVER ....
When I go to the directory /var/lib/gems/3.0.0/gems/http-parser-1.2.3/ (note that I dont include the /ext/ part)
And I execute the command /usr/bin/ruby -I/usr/lib/ruby/site_ruby/3.0.0 -rrubygems /var/lib/gems/3.0.0/gems/rake-13.0.6/exe/rake RUBYARCHDIR\=/var/lib/gems/3.0.0/extensions/x86_64-linux/3.0.0-static/http-parser-1.2.3 RUBYLIBDIR\=/var/lib/gems/3.0.0/extensions/x86_64-linux/3.0.0-static/http-parser-1.2.3
I get the correct output:
in the /var/lib/gems/3.0.0/gems/http-parser-1.2.3/ext directory I get the above output again.
So I think there might be something wrong with the packaging