1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
# SPDX-FileCopyrightText: 2021-2024 Greenbone AG
#
# SPDX-License-Identifier: AGPL-3.0-or-later
from pathlib import Path
from unittest import TestCase
from notus.scanner.errors import AdvisoriesLoadingError
from notus.scanner.loader.gpg_sha_verifier import VerificationResult
from notus.scanner.loader.json import JSONAdvisoriesLoader
from notus.scanner.models.packages.rpm import RPMPackage
_here = Path(__file__).parent
class JSONAdvisoriesLoaderTestCase(TestCase):
def test_unknown_file(self):
loader = JSONAdvisoriesLoader(
advisories_directory_path=_here,
verify=lambda _: VerificationResult.SUCCESS,
)
self.assertIsNone(loader.load_package_advisories("foo"))
def test_verification_failure(self):
loader = JSONAdvisoriesLoader(
advisories_directory_path=_here,
verify=lambda _: VerificationResult.INVALID_HASH,
)
with self.assertRaises(AdvisoriesLoadingError):
loader.load_package_advisories("EmptyOS")
def test_empty_file(self):
loader = JSONAdvisoriesLoader(
advisories_directory_path=_here,
verify=lambda _: VerificationResult.SUCCESS,
)
advisories = loader.load_package_advisories("EmptyOS")
self.assertIsNone(advisories)
def test_example(self):
loader = JSONAdvisoriesLoader(
advisories_directory_path=_here,
verify=lambda _: VerificationResult.SUCCESS,
)
advisories = loader.load_package_advisories("EulerOS V2.0SP1")
if not advisories:
self.fail("Advisories are none")
self.assertIsNotNone(advisories)
self.assertEqual(len(advisories), 55)
package1 = RPMPackage.from_full_name("openssh-6.6.1p1-25.4.h3.x86_64")
if not package1:
self.fail("package1 is None")
package2 = RPMPackage.from_full_name(
"openssh-clients-6.6.1p1-25.4.h3.x86_64"
)
if not package2:
self.fail("package2 is None")
package_advisories1 = advisories.get_package_advisories_for_package(
package1
)
package_advisories2 = advisories.get_package_advisories_for_package(
package2
)
oid = "1.3.6.1.4.1.25623.1.1.2.2016.1008"
self.assertEqual(len(package_advisories1), 1)
self.assertEqual(len(package_advisories2), 1)
self.assertIn(oid, package_advisories1.keys())
self.assertIn(oid, package_advisories2.keys())
package_advisories1 = package_advisories1[oid]
package_advisories2 = package_advisories2[oid]
# get first PackageAdvisory from the sets
package_advisory1 = next(iter(package_advisories1))
package_advisory2 = next(iter(package_advisories2))
self.assertEqual(package_advisory1.oid, package_advisory2.oid)
advisory = package_advisory1.oid
self.assertEqual(advisory, "1.3.6.1.4.1.25623.1.1.2.2016.1008")
def test_invalid_package_type(self):
loader = JSONAdvisoriesLoader(
advisories_directory_path=_here,
verify=lambda _: VerificationResult.SUCCESS,
)
advisory = loader.load_package_advisories("invalid_package")
self.assertIsNone(advisory)
|
