diff options
| -rw-r--r-- | meta/classes/cve-check.bbclass | 23 |
1 files changed, 12 insertions, 11 deletions
diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index d95465775d..5c8b512c11 100644 --- a/meta/classes/cve-check.bbclass +++ b/meta/classes/cve-check.bbclass | |||
| @@ -145,17 +145,18 @@ python do_cve_check () { | |||
| 145 | """ | 145 | """ |
| 146 | from oe.cve_check import get_patched_cves | 146 | from oe.cve_check import get_patched_cves |
| 147 | 147 | ||
| 148 | if os.path.exists(d.getVar("CVE_CHECK_DB_FILE")): | 148 | with bb.utils.fileslocked([d.getVar("CVE_CHECK_DB_FILE_LOCK")], shared=True): |
| 149 | try: | 149 | if os.path.exists(d.getVar("CVE_CHECK_DB_FILE")): |
| 150 | patched_cves = get_patched_cves(d) | 150 | try: |
| 151 | except FileNotFoundError: | 151 | patched_cves = get_patched_cves(d) |
| 152 | bb.fatal("Failure in searching patches") | 152 | except FileNotFoundError: |
| 153 | ignored, patched, unpatched, status = check_cves(d, patched_cves) | 153 | bb.fatal("Failure in searching patches") |
| 154 | if patched or unpatched or (d.getVar("CVE_CHECK_COVERAGE") == "1" and status): | 154 | ignored, patched, unpatched, status = check_cves(d, patched_cves) |
| 155 | cve_data = get_cve_info(d, patched + unpatched + ignored) | 155 | if patched or unpatched or (d.getVar("CVE_CHECK_COVERAGE") == "1" and status): |
| 156 | cve_write_data(d, patched, unpatched, ignored, cve_data, status) | 156 | cve_data = get_cve_info(d, patched + unpatched + ignored) |
| 157 | else: | 157 | cve_write_data(d, patched, unpatched, ignored, cve_data, status) |
| 158 | bb.note("No CVE database found, skipping CVE check") | 158 | else: |
| 159 | bb.note("No CVE database found, skipping CVE check") | ||
| 159 | 160 | ||
| 160 | } | 161 | } |
| 161 | 162 | ||