search

golang / go

The Go programming language
https://go.dev
BSD 3-Clause "New" or "Revised" License
123.3k stars 17.58k forks source link

x/vulndb: "no metadata for C" when computing derived symbols #53583

Open neild opened 2 years ago

neild commented 2 years ago 
$ go run ./cmd/vulnreport fix reports/GO-2022-0417.yaml
2022/06/28 10:03:00 fix("reports/GO-2022-0417.yaml"): addExportedSymbols("github.com/containers/buildah", ""): packages.Load:
could not import C (no metadata for C)
invalid operation: cannot compare d.dh == nil (operator == not defined on untyped nil)
invalid operation: cannot compare c.ctx == nil (operator == not defined on untyped nil)
invalid operation: cannot compare key.k == nil (operator == not defined on untyped nil)
exit status 1

This is a report for the package "github.com/containers/buildah"; from the error, it looks like we have a problem with analyzing packages with a transitive C dependency.

See also #36547.

dr2chase commented 2 years ago

@golang/vulndb, PTAL, TYVM.