1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
// SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
package spdxlib
import (
"fmt"
"github.com/spdx/tools-golang/spdx"
"github.com/spdx/tools-golang/spdx/v2/common"
)
// ValidateDocument returns an error if the Document is found to be invalid, or nil if the Document is valid.
// Currently, this only verifies that all Element IDs mentioned in Relationships exist in the Document as either a
// Package or an UnpackagedFile.
func ValidateDocument(doc *spdx.Document) error {
// cache a map of package IDs for quick lookups
validElementIDs := make(map[common.ElementID]bool)
for _, docPackage := range doc.Packages {
validElementIDs[docPackage.PackageSPDXIdentifier] = true
}
for _, unpackagedFile := range doc.Files {
validElementIDs[unpackagedFile.FileSPDXIdentifier] = true
}
// add the Document element ID
validElementIDs[common.MakeDocElementID("", "DOCUMENT").ElementRefID] = true
for _, relationship := range doc.Relationships {
if !validElementIDs[relationship.RefA.ElementRefID] {
return fmt.Errorf("%s used in relationship but no such package exists", string(relationship.RefA.ElementRefID))
}
if !validElementIDs[relationship.RefB.ElementRefID] {
return fmt.Errorf("%s used in relationship but no such package exists", string(relationship.RefB.ElementRefID))
}
}
return nil
}
|
