]> code.ossystems Code Review - openembedded-core.git/commit
cve-check.bbclass: detect patched CVE's also from patch file names
authorMikko Rapeli <mikko.rapeli@bmw.de>
Mon, 4 Sep 2017 06:22:14 +0000 (09:22 +0300)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 5 Sep 2017 13:58:37 +0000 (14:58 +0100)
commit5ee5b0c66627c9e974c838b86e2e659c2f601f2a
tree639926706bd2ddf9c63fa34905c528d235c8ca62
parent9d049bf7941f30e35c51775684559e95185fba96
cve-check.bbclass: detect patched CVE's also from patch file names

While poky master branch has been fixed so that all CVE patch files have
the:

CVE: CVE-2017-1234556

strings in the patch comments, many older versions of poky and other meta
layers are not, but the CVE patches quite often have the CVE id in the
patch file name.

If the CVE: string also found, there are no duplicates in the report.

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/cve-check.bbclass