bslathi19/buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

support/scripts/pkg-stats: clarify when a CVE/CPE should report as N/A

Browse Source 
- If a package doesn't have any versioning, ignore and state that
 - If a package is virtual, CVE=ignore and CPE state virtual
 - For any of these NA cases, don't provide search link and color box
   green

Cc: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Matthew Weber <matthew.weber@collins.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
This commit is contained in:
Matthew Weber
2021-05-18 21:46:38 -05:00
committed by Yann E. MORIN
parent 9368f3f23d
commit 50791af71f
1 changed files with 17 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
support/scripts/pkg-stats
View File

@@ -229,7 +229,10 @@ class Package:
""" """
var = self.pkgvar() var = self.pkgvar()
if not self.is_actual_package: if not self.is_actual_package:
self.status['cpe'] = ("na", "no valid package infra") self.status['cpe'] = ("na", "N/A - virtual pkg")
return
if not self.current_version:
self.status['cpe'] = ("na", "no version information available")
return return
if var in self.all_cpeids: if var in self.all_cpeids:
@@ -587,7 +590,7 @@ def check_package_cves(nvd_path, packages):
cpe_product_pkgs = defaultdict(list) cpe_product_pkgs = defaultdict(list)
for pkg in packages: for pkg in packages:
if not pkg.is_actual_package: if not pkg.is_actual_package:
pkg.status['cve'] = ("na", "no valid package infra") pkg.status['cve'] = ("na", "N/A")
continue continue
if not pkg.current_version: if not pkg.current_version:
pkg.status['cve'] = ("na", "no version information available") pkg.status['cve'] = ("na", "no version information available")
@@ -909,6 +912,8 @@ def dump_html_pkg(f, pkg):
td_class.append("cve-ok") td_class.append("cve-ok")
elif pkg.is_status_error("cve"): elif pkg.is_status_error("cve"):
td_class.append("cve-nok") td_class.append("cve-nok")
elif pkg.is_status_na("cve") and not pkg.is_actual_package:
td_class.append("cve-ok")
else: else:
td_class.append("cve-unknown") td_class.append("cve-unknown")
f.write(" <td class=\"%s\">\n" % " ".join(td_class)) f.write(" <td class=\"%s\">\n" % " ".join(td_class))
@@ -936,18 +941,23 @@ def dump_html_pkg(f, pkg):
td_class.append("cpe-ok") td_class.append("cpe-ok")
elif pkg.is_status_error("cpe"): elif pkg.is_status_error("cpe"):
td_class.append("cpe-nok") td_class.append("cpe-nok")
elif pkg.is_status_na("cpe") and not pkg.is_actual_package:
td_class.append("cpe-ok")
else: else:
td_class.append("cpe-unknown") td_class.append("cpe-unknown")
f.write(" <td class=\"%s\">\n" % " ".join(td_class)) f.write(" <td class=\"%s\">\n" % " ".join(td_class))
if pkg.cpeid: if pkg.cpeid:
f.write(" <code>%s</code>\n" % pkg.cpeid) f.write(" <code>%s</code>\n" % pkg.cpeid)
if not pkg.is_status_ok("cpe"): if not pkg.is_status_ok("cpe"):
if pkg.cpeid: if pkg.is_actual_package and pkg.current_version:
f.write(" <br/>%s <a href=\"https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=%s\">(Search)</a>\n" % # noqa: E501 if pkg.cpeid:
(pkg.status['cpe'][1], ":".join(pkg.cpeid.split(":")[0:5]))) f.write(" <br/>%s <a href=\"https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=%s\">(Search)</a>\n" % # noqa: E501
(pkg.status['cpe'][1], ":".join(pkg.cpeid.split(":")[0:5])))
else:
f.write(" %s <a href=\"https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=%s\">(Search)</a>\n" % # noqa: E501
(pkg.status['cpe'][1], pkg.name))
else: else:
f.write(" %s <a href=\"https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=%s\">(Search)</a>\n" % f.write(" %s\n" % pkg.status['cpe'][1])
(pkg.status['cpe'][1], pkg.name))
f.write(" </td>\n") f.write(" </td>\n")