On Mon, 16 Dec 2024, 16:01 Ross Burton, <[email protected]> wrote: > On 16 Dec 2024, at 14:59, Ross Burton <[email protected]> wrote: > > > > On 12 Dec 2024, at 06:54, Marta Rybczynska via lists.openembedded.org > <[email protected]> wrote: > >> > >> This series is allowing choice of the NVD feed to use, you can > >> configure them using the NVD_DB_VERSION variable in local.conf > >> > >> Available feeds: > >> - NVD2 (default) - the current NVD API v2 feed > >> - NVD1 - the old NVD feed (deprecated, but still working) > >> - FKIE - the NVD feed restoration from FKIE-CAD > >> > >> Marta Rybczynska (4): > >> cve-update-db-native: restore > >> cve-update-db-native: update structure > >> cve-update-db-native: add the fkie source > >> cve-check: allow feed choice > > > > If I select FKIE this fails to fetch: > > > > File: '/home/rosbur01/Yocto/poky/meta/recipes-core/meta/ > cve-update-db-native.bb', lineno: 301, function: update_db_nvdjson > > 0297: import json > > 0298: bb.warn(str(jsondata)[:1000]) > > 0299: root = json.loads(jsondata) > > 0300: > > *** 0301: for elt in root['CVE_Items']: > > 0302: if not elt['impact']: > > 0303: continue > > 0304: > > 0305: accessVector = None > > Exception: KeyError: 'CVE_Items' > > > > Adding a dump of the JSON shows that the keys are lowercase, which the > parser is not expecting: > > > > WARNING: cve-update-db-native-1.0-r0 do_fetch: b'{\n "timestamp": > "2024-12-16T01:00:10+00:00",\n "cve_count": 2392,\n "feed_name": > "CVE-2002",\n "source": "fkie-cad/nvd-json-data-feeds",\n "cve_items”: > > Nope I’m wrong, the correct bug is "if you typo the NVD_DB_VERSION then > weird things happen”. I suggest either validating it early, or always > checking for equality instead of using else. I accidentally put KFIE and > it fell into a bad combination of cases. >
Thanks for testing Ross! I'm fixing that. Kind regards, Marta >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#208792): https://lists.openembedded.org/g/openembedded-core/message/208792 Mute This Topic: https://lists.openembedded.org/mt/110075962/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
