-
Notifications
You must be signed in to change notification settings - Fork 99
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
28 changed files
with
3,393 additions
and
51 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,123 @@ | ||
| package fedora_test | ||
|
|
||
| import ( | ||
| "encoding/json" | ||
| "fmt" | ||
| "net/http" | ||
| "net/http/httptest" | ||
| "os" | ||
| "path/filepath" | ||
| "reflect" | ||
| "testing" | ||
|
|
||
| "github.com/aquasecurity/vuln-list-update/fedora" | ||
| "github.com/kylelemons/godebug/pretty" | ||
| "github.com/stretchr/testify/assert" | ||
| "github.com/stretchr/testify/require" | ||
| ) | ||
|
|
||
| func Test_Update(t *testing.T) { | ||
| type args struct { | ||
| mode string | ||
| uinfoURLPath string | ||
| release []string | ||
| repos []string | ||
| arches []string | ||
| } | ||
| tests := []struct { | ||
| name string | ||
| rootDir string | ||
| args args | ||
| expectedError error | ||
| }{ | ||
| { | ||
| name: "fedora 35", | ||
| rootDir: "testdata/fixtures/fedora35", | ||
| args: args{ | ||
| mode: "fedora", | ||
| uinfoURLPath: "/pub/fedora/linux/updates/%s/%s/%s/", | ||
| release: []string{"35"}, | ||
| repos: []string{"Everything", "Modular"}, | ||
| arches: []string{"x86_64"}, | ||
| }, | ||
| expectedError: nil, | ||
| }, | ||
| { | ||
| name: "epel 7", | ||
| rootDir: "testdata/fixtures/epel7", | ||
| args: args{ | ||
| mode: "epel", | ||
| uinfoURLPath: "/pub/epel/%s/%s/", | ||
| release: []string{"7"}, | ||
| repos: []string{}, | ||
| arches: []string{"x86_64"}, | ||
| }, | ||
| expectedError: nil, | ||
| }, | ||
| { | ||
| name: "epel 8", | ||
| rootDir: "testdata/fixtures/epel8", | ||
| args: args{ | ||
| mode: "epel", | ||
| uinfoURLPath: "/pub/epel/%s/%s/%s/", | ||
| release: []string{"8"}, | ||
| repos: []string{"Everything"}, | ||
| arches: []string{"x86_64"}, | ||
| }, | ||
| expectedError: nil, | ||
| }, | ||
| } | ||
|
|
||
| for _, tt := range tests { | ||
| t.Run(tt.name, func(t *testing.T) { | ||
| mux := http.NewServeMux() | ||
| mux.Handle("/pub/", http.FileServer(http.Dir(tt.rootDir))) | ||
| mux.Handle("/packages/", http.FileServer(http.Dir(tt.rootDir))) | ||
| mux.HandleFunc("/show_bug.cgi", func(rw http.ResponseWriter, r *http.Request) { | ||
| bugzillaID := r.URL.Query().Get("id") | ||
| r.URL.Path = fmt.Sprintf("%s.xml", bugzillaID) | ||
| r.URL.RawQuery = "" | ||
| http.FileServer(http.Dir(filepath.Join(tt.rootDir, "bugzilla"))).ServeHTTP(rw, r) | ||
| }) | ||
| tsServerURL := httptest.NewServer(mux) | ||
| defer tsServerURL.Close() | ||
|
|
||
| dir := t.TempDir() | ||
| fd := fedora.NewConfig(fedora.With(map[string]string{tt.args.mode: tsServerURL.URL + tt.args.uinfoURLPath, "bugzilla": tsServerURL.URL + "/show_bug.cgi?ctype=xml&id=%s", "moduleinfo": tsServerURL.URL + "/packages/%s/%s/%d.%s/files/module/modulemd.%s.txt"}, dir, 1, 0, 0, map[string][]string{tt.args.mode: tt.args.release}, tt.args.repos, tt.args.arches)) | ||
| if err := fd.Update(); tt.expectedError != nil { | ||
| require.Error(t, err) | ||
| assert.Contains(t, err.Error(), tt.expectedError.Error()) | ||
| return | ||
| } | ||
|
|
||
| err := filepath.Walk(dir, func(path string, info os.FileInfo, errfp error) error { | ||
| if errfp != nil { | ||
| return errfp | ||
| } | ||
| if info.IsDir() { | ||
| return nil | ||
| } | ||
|
|
||
| dir, file := filepath.Split(path) | ||
| b, err := os.ReadFile(filepath.Join("testdata", "golden", filepath.Base(dir), file)) | ||
| assert.NoError(t, err, "failed to open the golden file") | ||
| var want fedora.FSA | ||
| err = json.Unmarshal(b, &want) | ||
| assert.NoError(t, err, "failed to unmarshal json") | ||
|
|
||
| b, err = os.ReadFile(path) | ||
| assert.NoError(t, err, "failed to open the result file") | ||
| var got fedora.FSA | ||
| err = json.Unmarshal(b, &got) | ||
| assert.NoError(t, err, "failed to unmarshal json") | ||
|
|
||
| if !reflect.DeepEqual(got, want) { | ||
| t.Errorf("[%s]\n diff: %s", tt.name, pretty.Compare(got, want)) | ||
| } | ||
|
|
||
| return nil | ||
| }) | ||
| assert.Nil(t, err, "filepath walk error") | ||
| }) | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,120 @@ | ||
| <?xml version="1.0" encoding="UTF-8" standalone="yes"?> | ||
| <!DOCTYPE bugzilla SYSTEM "https://bugzilla.redhat.com/page.cgi?id=bugzilla.dtd"> | ||
| <bugzilla version="5.0.4.rh65" urlbase="https://bugzilla.redhat.com/" maintainer="[email protected]"> | ||
|
|
||
| <bug> | ||
| <bug_id>1684012</bug_id> | ||
| <alias>CVE-2019-9027</alias> | ||
| <creation_ts>2019-02-28 09:34:35 +0000</creation_ts> | ||
| <short_desc>CVE-2019-9027 matio: heap-based buffer overflow in function ReadNextCell() in mat5.c</short_desc> | ||
| <delta_ts>2019-11-28 13:39:35 +0000</delta_ts> | ||
| <reporter_accessible>1</reporter_accessible> | ||
| <cclist_accessible>1</cclist_accessible> | ||
| <classification_id>3</classification_id> | ||
| <classification>Other</classification> | ||
| <product>Security Response</product> | ||
| <component>vulnerability</component> | ||
| <version>unspecified</version> | ||
| <rep_platform>All</rep_platform> | ||
| <op_sys>Linux</op_sys> | ||
| <bug_status>CLOSED</bug_status> | ||
| <resolution>UPSTREAM</resolution> | ||
|
|
||
|
|
||
| <bug_file_loc/> | ||
| <status_whiteboard/> | ||
| <keywords>Security</keywords> | ||
| <priority>low</priority> | ||
| <bug_severity>low</bug_severity> | ||
| <target_milestone>---</target_milestone> | ||
| <dependson>1684013</dependson> | ||
|
|
||
|
|
||
| <dependson>1684014</dependson> | ||
|
|
||
| <everconfirmed>1</everconfirmed> | ||
| <reporter name="Dhananjay Arunesh">darunesh</reporter> | ||
| <assigned_to name="Red Hat Product Security">security-response-team</assigned_to> | ||
| <cc>c.david86</cc> | ||
|
|
||
|
|
||
| <cc>kwizart</cc> | ||
|
|
||
|
|
||
| <cc>lupinix.fedora</cc> | ||
|
|
||
|
|
||
|
|
||
| <cf_fixed_in/> | ||
| <cf_doc_type>If docs needed, set a value</cf_doc_type> | ||
| <cf_release_notes/> | ||
| <cf_story_points>---</cf_story_points> | ||
|
|
||
| <cf_environment/> | ||
| <cf_last_closed>2019-06-10 10:49:24</cf_last_closed> | ||
| <cf_type>---</cf_type> | ||
| <cf_regression_status>---</cf_regression_status> | ||
| <cf_mount_type>---</cf_mount_type> | ||
| <cf_documentation_action>---</cf_documentation_action> | ||
| <cf_crm/> | ||
| <cf_verified_branch/> | ||
| <cf_category>---</cf_category> | ||
| <cf_ovirt_team>---</cf_ovirt_team> | ||
|
|
||
| <cf_cloudforms_team>---</cf_cloudforms_team> | ||
| <cf_target_upstream_version/> | ||
|
|
||
|
|
||
|
|
||
|
|
||
|
|
||
| <target_release>---</target_release> | ||
|
|
||
| <votes>0</votes> | ||
|
|
||
|
|
||
|
|
||
|
|
||
|
|
||
|
|
||
|
|
||
| <comment_sort_order>oldest_to_newest</comment_sort_order> | ||
| <long_desc isprivate="0"> | ||
| <commentid>12500308</commentid> | ||
| <comment_count>0</comment_count> | ||
| <who name="Dhananjay Arunesh">darunesh</who> | ||
| <bug_when>2019-02-28 09:34:35 +0000</bug_when> | ||
| <thetext>An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow problem in the function ReadNextCell() in mat5.c. | ||
|
|
||
| References: | ||
| https://github.com/tbeu/matio/issues/103 | ||
| https://github.com/TeamSeri0us/pocs/tree/master/matio</thetext> | ||
| </long_desc><long_desc isprivate="0"> | ||
| <commentid>12500313</commentid> | ||
| <comment_count>1</comment_count> | ||
| <who name="Dhananjay Arunesh">darunesh</who> | ||
| <bug_when>2019-02-28 09:34:56 +0000</bug_when> | ||
| <thetext>Created matio tracking bugs for this issue: | ||
|
|
||
| Affects: fedora-all [bug 1684013]</thetext> | ||
| </long_desc><long_desc isprivate="0"> | ||
| <commentid>12500317</commentid> | ||
| <comment_count>2</comment_count> | ||
| <who name="Dhananjay Arunesh">darunesh</who> | ||
| <bug_when>2019-02-28 09:35:18 +0000</bug_when> | ||
| <thetext>Created matio tracking bugs for this issue: | ||
|
|
||
| Affects: epel-all [bug 1684014]</thetext> | ||
| </long_desc><long_desc isprivate="0"> | ||
| <commentid>12825865</commentid> | ||
| <comment_count>3</comment_count> | ||
| <who name="Product Security DevOps Team">prodsec-dev</who> | ||
| <bug_when>2019-06-10 10:49:24 +0000</bug_when> | ||
| <thetext>This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.</thetext> | ||
| </long_desc> | ||
|
|
||
|
|
||
|
|
||
| </bug> | ||
|
|
||
| </bugzilla> |
Oops, something went wrong.