diff options
| author |   Grygorii Tertychnyi <gtertych@cisco.com> | 2018-10-29 17:13:10 +0200 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-11-16 16:32:29 +0000 |
| commit | 667d5e77e1ce0f0e531ed87f6fc30e1d65b16759 (patch) | |
| tree | 8c97fcc32c77838f7b001ab2baa545dcfe1d0e4d /meta/classes | |
| parent | f01153e1782425756a40929ffb3fa72993b7a3b1 (diff) | |
| download | openembedded-core-contrib-667d5e77e1ce0f0e531ed87f6fc30e1d65b16759.tar.gz | |
cve-check: Allow multiple entries in CVE_PRODUCT
There are both "curl" and "libcurl" CPEs in NVD.
All "curl" CVEs are currently missing in the reports.
Hence, switch "CVE_PRODUCT" to a space separated list.
It is useful for recipes generating several packages,
that have different product names in NVD.
(From OE-Core rev: 404f75e026393ddc55da87f6f04fb1201cff4e11)
Signed-off-by: Grygorii Tertychnyi <gtertych@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta/classes')
| -rw-r--r-- | meta/classes/cve-check.bbclass | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index 12ad3e5c5c..743bc08a4f 100644 --- a/meta/classes/cve-check.bbclass +++ b/meta/classes/cve-check.bbclass @@ -190,7 +190,8 @@ def check_cves(d, patched_cves): # Write the faux CSV file to be used with cve-check-tool fd, faux = tempfile.mkstemp(prefix="cve-faux-") with os.fdopen(fd, "w") as f: - f.write("%s,%s,%s," % (bpn, pv, cves)) + for pn in bpn.split(): + f.write("%s,%s,%s,\n" % (pn, pv, cves)) cmd.append(faux) output = subprocess.check_output(cmd).decode("utf-8") |