fasten-project / vulnerability-producer

Gathers, enriches and publishes vulnerability information to a Kafka topic.
https://www.fasten-project.eu/
Apache License 2.0
6 stars 3 forks source link

Separate original and new hit lines on patches #68

Closed elanzini closed 3 years ago

elanzini commented 3 years ago

To extract more precise callables when looking at (filename, line_number) combination, we separate the diff information into original and new hit lines. On the consumer side, we look for callables in the last_vulnerable_version in the original hit lines and in the first_patched_version for the new hit lines.