Re: [OE-core][PATCH v3 1/5] cve-check: annotate CVEs during analysis

[Richard Purdie <richard.purdie@linuxfoundation.org>]

Hi Marta,


With the v3 series applied we did just see this on the autobuilder
unfortunately so I'm not sure that problem is addressed:

https://autobuilder.yoctoproject.org/typhoon/#/builders/87/builds/7004/steps/14/logs/stdio


ERROR: m4-native-1.4.19-r0 do_cve_check: Error executing a python function in exec_func_python() autogenerated:
The stack trace of python calls that resulted in this exception/failure was:
File: 'exec_func_python() autogenerated', lineno: 2, function: <module>
     0001:
 *** 0002:do_cve_check(d)
     0003:
File: '/home/pokybuild/yocto-worker/oe-selftest-ubuntu/build/meta/classes/cve-check.bbclass', lineno: 191, function: do_cve_check
     0187:            try:
     0188:                patched_cves = get_patched_cves(d)
     0189:            except FileNotFoundError:
     0190:                bb.fatal("Failure in searching patches")
 *** 0191:            cve_data, status = check_cves(d, patched_cves)
     0192:            if len(cve_data) or (d.getVar("CVE_CHECK_COVERAGE") == "1" and status):
     0193:                get_cve_info(d, cve_data)
     0194:                cve_write_data(d, cve_data, status)
     0195:        else:
File: '/home/pokybuild/yocto-worker/oe-selftest-ubuntu/build/meta/classes/cve-check.bbclass', lineno: 379, function: check_cves
     0375:            vendor = "%"
     0376:
     0377:        # Find all relevant CVE IDs.
     0378:        cve_cursor = conn.execute("SELECT DISTINCT ID FROM PRODUCTS WHERE PRODUCT IS ? AND VENDOR LIKE ?", (product, vendor))
 *** 0379:        for cverow in cve_cursor:
     0380:            cve = cverow[0]
     0381:
     0382:            if cve_is_ignored(d, cve_data, cve):
     0383:                bb.note("%s-%s ignores %s" % (product, pv, cve))
Exception: sqlite3.DatabaseError: database disk image is malformed



Cheers,

Richard