CVE-2018-3779: active-support impersonates 'activesupport' gem

The vulnerability stems from a malicious compiled extension in the 'active-support' gem, not from identifiable Ruby functions. The attack vector involves native code that decodes a base64 domain, downloads payloads, and executes them. Since the advisory provides no source code or disassembly of the compiled extension, and RubyGems' vulnerability reporting doesn't list specific vulnerable functions, we cannot confidently name any Ruby-level functions. The CWE-77 command injection occurs at the native code level, which isn't exposed through standard Ruby function signatures.