159 Commits
Author SHA1 Message Date
Ikey Doherty 69b81b087c Release v5
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
v5
2015-06-09 16:26:12 +01:00
Ikey Doherty d77bec153c main: Give srpm packages the same treatment
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-04 16:19:26 +01:00
Ikey Doherty 484c5e7cf4 library: Add missing includes
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-04 15:59:25 +01:00
Ikey Doherty 3741534d2c Fix defects, partially deglibify plugin-manager
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-04 02:24:04 +01:00
Ikey Doherty f93394af1e main: Fix description for -u flag
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 22:59:53 +01:00
Ikey Doherty 9708b8f5cd update: Split and share functionality with main
We can now force a DB update from cve-check-tool if we find its more than
2 hours old, missing, etc.

Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 22:48:31 +01:00
Ikey Doherty e1106b08ed csv: Fix broken issue count
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 22:06:30 +01:00
Ikey Doherty 1df1d8efe1 update: Force DB generation
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 22:02:36 +01:00
Ikey Doherty 84168b08c6 Refactor/spread util code
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 22:02:29 +01:00
Ikey Doherty 68826b3e21 main: Ensure we remove duplicates
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 21:55:09 +01:00
Ikey Doherty 7f83213615 main: Further delibification of mainrun
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 21:38:33 +01:00
Ikey Doherty fa795573c7 tests: Fix leak in check-packaging
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 21:03:55 +01:00
Ikey Doherty c650df1430 Plug DIR leak and resolve root namespace conflicts
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 20:58:59 +01:00
Ikey Doherty aafb3eab22 library: Remove debug
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 20:29:30 +01:00
Ikey Doherty 4093c4f426 library: Fix some template leaking on false booleans
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 20:18:19 +01:00
Ikey Doherty b44930714b Fix leaks in output plugins
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 20:03:28 +01:00
Ikey Doherty b3e1b5928b Further path deglibifications
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 19:57:37 +01:00
Ikey Doherty 1eb5ee3b95 Further deglibifications
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 19:51:47 +01:00
Ikey Doherty 8df23f7fe9 library: Begin deglibification to stop leaking like a bucket
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 19:24:05 +01:00
Ikey Doherty 93800ac0cb core: Use case insensitive product searching
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 18:15:47 +01:00
Ikey Doherty bae833dbf2 main: Cleanup unused code
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 18:11:22 +01:00
Ikey Doherty 0982da4490 Split update functionality into cve-check-update binary
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 18:08:31 +01:00
Ikey Doherty cdf42a5471 Split core functionality into a conveniencel library
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 17:46:36 +01:00
Ikey Doherty a6e96e58f2 main: Restore CVE mapping functionality
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 17:25:27 +01:00
Ikey Doherty 57db1118ce main: Re-enable bug tracking
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 17:07:29 +01:00
Ikey Doherty 6eef9d3762 Begin migrating to SQL database
We've moved to using an indexed database which leads to a far faster execution.
Currently the bug tracking is disabled in this transition as further code
refactoring needs to take place. We'll be separating the update (write) and
check (read) stages into separate binaries, which means everything will change.

Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 16:32:41 +01:00
Ikey Doherty 4720226003 Ensure products table is unique so we don't drop it anymore
This has the side effect that seek times are much faster when retrieving
product results with compound statements.

Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 14:46:53 +01:00
Ikey Doherty 88589d8bd3 core: Fix leak with vulnerability structure
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 06:00:18 +01:00
Ikey Doherty d5e3098b97 core: Immediately commit products and save ourselves linked list penalty
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 05:49:39 +01:00
Ikey Doherty 01d1c5f082 Fix erronous header
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 05:39:48 +01:00
Ikey Doherty 4ebf7bbe27 tests: Incorporate dummy data
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 05:21:15 +01:00
Ikey Doherty 241123115f Begin migration to dedicated SQL database
This is the beginning of a large refactor to greatly improve performance
and flexibility of cve-check-tool. Core functionality is still unaltered right
now, as this change simply introduces the new initial core. This core uses
a named database to store all NVD data for later retrieval.

Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-03 05:19:30 +01:00
Ikey Doherty 77ada9c0fe Add mapping support for CVE names to package names
The file should be of the following format:

	[Mapping]
	CVE_PRODUCT = PACKAGE_NAME

Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-06-01 18:51:40 +01:00
Ikey Doherty 6f6335d719 Make direction obvious 2015-05-29 15:06:07 +01:00
Ikey Doherty 85324e0490 Update diagram to reflect nature of data flows
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-29 15:03:44 +01:00
Ikey Doherty a0ca7d4a01 Add redesign notes to TODO
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-29 14:34:06 +01:00
Ikey Doherty 24ff976e57 output: Default to 0 in CSV output with no bugs
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-28 18:27:55 +01:00
Ikey Doherty 21d61e2337 library: Support package-nvr files
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-22 19:35:30 +01:00
Ikey Doherty 43b66d2e86 Add cve_plugin_get_by_cap utility method
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-08 18:42:58 +01:00
Ikey Doherty 2c39e616a4 Move output handlers into a new plugin system
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-08 13:10:08 +01:00
John L. Whiteman 817baa493f Bumped version to 4
Signed-off-by: John L. Whiteman <john.l.whiteman@intel.com>
v4
2015-05-07 14:55:33 -07:00
Ikey Doherty 406e8ce8cb Drop stateless config for now as it currently makes no sense
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 19:53:42 +01:00
Ikey Doherty dd70aa62e8 tests: Slightly enhance bool check
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 16:10:04 +01:00
Ikey Doherty 673b6b9a70 tests: Add bool test for TemplateContext
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 16:05:53 +01:00
Ikey Doherty ab617bcfb6 tests: Add list check for TemplateContext
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 16:02:09 +01:00
Ikey Doherty 3a0e7f7594 Ensure make distcheck passes by incorporating files in final tarball
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 15:22:56 +01:00
Ikey Doherty 5f1bfcca3d Fix location of header 2015-05-07 15:11:54 +01:00
Ikey Doherty 93b25fce23 Refactor tree - move output handlers into new subdir
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 14:57:55 +01:00
Ikey Doherty 812f0b4f97 Refactor tree - move library components into new subdir
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 14:25:06 +01:00
Ikey Doherty 2a5ff06670 Refactor tree - move packaging formats into independent directory
Signed-off-by: Ikey Doherty <michael.i.doherty@intel.com>
2015-05-07 14:18:45 +01:00