buxx / synergine2

Rethinked synergine framework

synergine2

A framework to build simulation with subject focused.

Install

Synergine is in Alpha development status. To install the lib:

python setup.py develop

To install xyz tools packages:

pip install -e ".[xyz]"

To install cocos2d tools packages:

pip install -e ".[cocos2d]"

# Automated testing

To install tests packages:

pip install -e ".[tests]"

And run tests:

pytest tests

Synergine 1 graphic usage examples

Life game (More about life game)

Intelligine, Social bug simulation:

Project github page here.

synergine2's Issues

Ensure working around time base

Core system is based on cycle mechanism. Behaviours offer an time based execution: Each cycle, if last behaviour execution time is inferior of minimal behaviour cycle time, it is not executed.

• Write tests on this feature (time based behaviors)
• Mechanisms have not to be executed if no linked behavior will be executed (time based behaviors)
• Test it (mechanisms)

This is a test issue from WhiteSource, it will be closed shortly

Enhance logging system: configuration of level and logger names

Actual loggers have the same name "synergine":

• Every logger should have a specialized name

Actual loggers use all the same logging level:

• Permit to configure each logger (by name) level

Fix test: main process terminal

I wrote a test to test main process terminal but it never finish: Some process maybe never terminated ? Maybe workers ? fix it and unskip this test.

CVE-2017-18342 High Severity Vulnerability detected by WhiteSource

CVE-2017-18342 - High Severity Vulnerability

Vulnerable Library - PyYAML-3.13.tar.gz

YAML parser and emitter for Python

path: /synergine2

Library home page: https://files.pythonhosted.org/packages/9e/a3/1d13970c3f36777c583f136c136f804d70f500168edc1edea6daa7200769/PyYAML-3.13.tar.gz

Dependency Hierarchy:

• ❌ PyYAML-3.13.tar.gz (Vulnerable Library)

Vulnerability Details

In PyYAML before 4.1, the yaml.load() API could execute arbitrary code. In other words, yaml.safe_load is not used.

Publish Date: 2018-06-27

URL: CVE-2017-18342

CVSS 3 Score Details (9.8)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

---

Step up your Open Source Security Game with WhiteSource here

shared_memory

Take a look into https://docs.python.org/3.8/library/multiprocessing.shared_memory.html for replace redis.

CVE-2019-6446 High Severity Vulnerability detected by WhiteSource

CVE-2019-6446 - High Severity Vulnerability

Vulnerable Library - numpy-1.16.1-cp35-cp35m-manylinux1_x86_64.whl

NumPy is the fundamental package for array computing with Python.

path: /synergine2/requirements.txt

Library home page: https://files.pythonhosted.org/packages/ad/15/690c13ae714e156491392cdbdbf41b485d23c285aa698239a67f7cfc9e0a/numpy-1.16.1-cp35-cp35m-manylinux1_x86_64.whl

Dependency Hierarchy:

• ❌ numpy-1.16.1-cp35-cp35m-manylinux1_x86_64.whl (Vulnerable Library)

Vulnerability Details

An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call.

Publish Date: 2019-01-16

URL: CVE-2019-6446

CVSS 3 Score Details (9.8)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

---

Step up your Open Source Security Game with WhiteSource here

Exception duing simulation

2017-03-06 11:10:10,801|synergine|27098|DEBUG: GrassSpawnBehaviour behaviour produce data: [(21, -29, 0), (22, -29, 0), (23, -29, 0), (-3, 9, 0), (-5, 9, 0), (-4, 9, 0), (-10, 2, 0), (-10, 3, 0), (-10, 4, 0)]
2017-03-06 11:10:10,808|synergine|17660|INFO: Simulation generate 1 behaviours
Traceback (most recent call last):
  File "sandbox/engulf/run.py", line 187, in <module>
    main()
  File "sandbox/engulf/run.py", line 183, in main
    core.run()
  File "/home/bastien/Projects/synergine2/synergine2/core.py", line 52, in run
    events.extend(self.cycle_manager.next())
  File "/home/bastien/Projects/synergine2/synergine2/cycle.py", line 50, in next
    events.extend(self._get_simulation_events())
  File "/home/bastien/Projects/synergine2/synergine2/cycle.py", line 80, in _get_simulation_events
    behaviour_events = self.simulation.behaviours[behaviour_class].action(behaviour_data)
  File "/home/bastien/Projects/synergine2/sandbox/engulf/behaviour.py", line 118, in action
    density=20,
  File "/home/bastien/Projects/synergine2/sandbox/engulf/subject.py", line 51, in __init__
    super().__init__(*args, **kwargs)
  File "/home/bastien/Projects/synergine2/synergine2/xyz.py", line 116, in __init__
    super().__init__(*args, **kwargs)
TypeError: __init__() missing 1 required positional argument: 'simulation'

Simulation mechanisms: test and ensure subject mechanisms have access

• Test it (unit test)
• Subject behaviors must be able to access simulation mechanisms data (through simulation object ? )