From 8bc310d08ad3c1da172422e5827e6278f6d92cd3 Mon Sep 17 00:00:00 2001 From: Raphael Geissert Date: Sun, 15 Apr 2012 19:08:01 +0000 Subject: Abort if there's garbage in the cve lists git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@18951 e39458fd-73e7-0310-bf30-c45bca0a0e42 --- check-external/update.sh | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'check-external') diff --git a/check-external/update.sh b/check-external/update.sh index 9d0cabca19..655895b9e3 100755 --- a/check-external/update.sh +++ b/check-external/update.sh @@ -22,6 +22,13 @@ set -e export LANG=C +check_list() { + if grep -vE '^CVE-[12][0-9]{3}-[0-9]{4}$' $1; then + echo "$1 contains garbage (see above), aborting" + exit 1 + fi +} + # Red Hat provides a complete dump of their tracker, which includes # unfixed issues. # Note: The downloaded html files are Copyright by Red Hat, Inc. @@ -32,6 +39,7 @@ done sed -rn '/CVE-[12][0-9]{3}-/{s/^.+>(CVE-[12][0-9]{3}-[0-9]{4})<.+$/\1/;T;p}' cve-*.html | sort > cve.list +check_list cve.list # List of issues fixed by each vendor, according to MITRE. Very # incomplete, but it doesn't hurt to double check (including our own list) @@ -41,4 +49,5 @@ for vendor in SUSE DEBIAN GENTOO FEDORA REDHAT UBUNTU; do wget -N http://cve.mitre.org/data/refs/refmap/source-$vendor.html sed -rn '/CVE-[12][0-9]{3}-/{s/^.+>(CVE-[12][0-9]{3}-[0-9]{4})<.+$/\1/;p}' source-$vendor.html | sort > $vendor.list + check_list $vendor.list done -- cgit v1.2.3