SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 18:15:42 +01:00
Code Issues Releases Activity Actions

Feat: Compare dates in changes.csv to those within the files if existent

Browse source
This commit is contained in:
JanHoefelmeyer 2025-01-22 11:27:39 +01:00
parent 5907a391df
commit 0fdf2b2905
1 changed files with 27 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

27
cmd/csaf_checker/processor.go
View file

@ -53,6 +53,7 @@ type processor struct {
pmd any
keys *crypto.KeyRing
labelChecker labelChecker
times map[csaf.AdvisoryFile]time.Time
invalidAdvisories topicMessages
badFilenames topicMessages
@ -213,6 +214,7 @@ func (p *processor) reset() {
p.pmd256 = nil
p.pmd = nil
p.keys = nil
clear(p.times)
p.invalidAdvisories.reset()
p.badFilenames.reset()
@ -620,6 +622,8 @@ func makeAbsolute(base *url.URL) func(*url.URL) *url.URL {
var yearFromURL = regexp.MustCompile(`.*/(\d{4})/[^/]+$`)
// integrity checks several csaf.AdvisoryFiles for formal
// mistakes, from conforming filenames to invalid advisories.
func (p *processor) integrity(
files []csaf.AdvisoryFile,
base string,
@ -750,6 +754,24 @@ func (p *processor) integrity(
p.badFolders.error("%s should be in folder %d", u, d.UTC().Year())
}
if len(p.times) > 0 && p.badChanges.used() {
current, err := p.expr.Eval(`$.document.tracking.current_release_date`, doc)
if err != nil {
p.badChanges.error("Extracting 'current_release_date' from %s failed: %v", u, err)
} else if text, ok := current.(string); !ok {
p.badChanges.error("'current_release_date' is not a string in %s", u)
} else if d, err := time.Parse(time.RFC3339, text); err != nil {
p.badChanges.error(
"Parsing 'initial_release_date' as RFC3339 failed in %s: %v", u, err)
} else {
fmt.Println(p.times[f])
fmt.Println(d)
if p.times[f] != d {
p.badChanges.error("Current release date in changes.csv and %s is not identical", u)
}
}
}
// Check hashes
p.badIntegrities.use()
@ -941,6 +963,10 @@ func (p *processor) checkChanges(base string, mask whereType) error {
}
p.badChanges.info("Found %v", changes)
if p.times == nil {
p.times = map[csaf.AdvisoryFile]time.Time{}
}
times, files, err := func() ([]time.Time, []csaf.AdvisoryFile, error) {
defer res.Body.Close()
var times []time.Time
@ -973,6 +999,7 @@ func (p *processor) checkChanges(base string, mask whereType) error {
times, files =
append(times, t),
append(files, csaf.PlainAdvisoryFile(path))
p.times[csaf.PlainAdvisoryFile(path)] = t
}
return times, files, nil
}()