[Buildroot] [RFC PATCH 02/14] utils/checkpackagelib/lib_mk.py: check _STATUS value is supported

[Thomas Perale via buildroot <buildroot@buildroot.org>]

Check that `<pkg>_<vuln-id>_STATUS` variable values are using a status
value supported.

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
 utils/checkpackagelib/lib_mk.py | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/utils/checkpackagelib/lib_mk.py b/utils/checkpackagelib/lib_mk.py
index 5d48e8929c..6201d324fa 100644
--- a/utils/checkpackagelib/lib_mk.py
+++ b/utils/checkpackagelib/lib_mk.py
@@ -443,3 +443,25 @@ class CPEVariables(_CheckFunction):
             if field == "VALID":
                 self.valid = {"lineno": lineno, "text": text}
             self.non_defaults += 1
+
+
+class VulnerabilityStatus(_CheckFunction):
+    VALID_STATUSES = [
+        "fixed",
+        "not-affected-component-not-present",
+        "not-affected-vulnerable-code-not-present",
+        "not-affected-vulnerable-code-not-in-execute-path",
+        "not-affected-vulnerable-code-cannot-be-controlled-by-adversary",
+    ]
+    CVE_STATUS = re.compile(r"^[A-Z0-9_]+(CVE-\d{4}-\d+)_STATUS\s*=\s*(\S+)")
+
+    def check_line(self, lineno, text):
+        m = self.CVE_STATUS.match(text.rstrip())
+        if m is None:
+            return
+        status = m.group(2)
+        if status not in self.VALID_STATUSES:
+            return ["{}:{}: invalid _STATUS value '{}', expected one of: {} ({})".format(
+                self.filename, lineno, status,
+                ", ".join(self.VALID_STATUSES), self.url_to_manual),
+                text]
-- 
2.54.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot