search

intel / cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
https://cve-bin-tool.readthedocs.io/en/latest/
GNU General Public License v3.0
1.24k stars 465 forks source link

fix: support .arr, support ios/wasm binaries #4521

Open iaincoulter opened 1 month ago

iaincoulter commented 1 month ago

Code changes to include .aar in list of zip type files. AAR is an android archive Binary file signatures for different apple mach_o/universal and arm support. Binary file signature for WASM binary

iaincoulter commented 1 month ago

Later change as realised some machines use "file" in version_scanner which i had not handled. Fixed "file" method so it also handles WebAssembly and backup python code handles various Mach-O formats and Webassembly via regex in file.py

iaincoulter commented 1 month ago

While adding new tests also realised flaw in versionScanner is_executable. Due to its use of 'file' utility it can fail to detect all binary file type that the python regexp supports so as a backup when it fails the file is_binary script is also run to double check for extra binary types that 'file' can miss.
One such type has magic chars CA FE BA BE but file on rocky8 reports "ISO-8859 text, with no line terminators"

terriko commented 1 month ago

Approving tests to run again

iaincoulter commented 3 weeks ago

Keep updating as new changes are applied to main but long tests continue to fail?

terriko commented 2 weeks ago

Updating the branch so that we get the updated longtest config.

iaincoulter commented 1 week ago

Hi, does someone need to do anything to enable the tests to run again

terriko commented 1 week ago

Hi, does someone need to do anything to enable the tests to run again

Yeah, because of some concern about people overloading our CI jobs I have to re-approve anyone not on a regular contributors list. Let me get those tests running again now.

iaincoulter commented 4 days ago

Updated with latest changes again but python long tests still an issue, last time i looked it appeared they had completed as test summary was displayed but then next step never ran?