diff options
| -rw-r--r-- | meta/classes/cve-check.bbclass | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index df6ebfd29d..f9e5cfa451 100644 --- a/meta/classes/cve-check.bbclass +++ b/meta/classes/cve-check.bbclass | |||
| @@ -166,9 +166,12 @@ def get_patches_cves(d): | |||
| 166 | pn = d.getVar("PN") | 166 | pn = d.getVar("PN") |
| 167 | cve_match = re.compile("CVE:( CVE\-\d{4}\-\d+)+") | 167 | cve_match = re.compile("CVE:( CVE\-\d{4}\-\d+)+") |
| 168 | 168 | ||
| 169 | # Matches last CVE-1234-211432 in the file name, also if written | 169 | # Matches the last "CVE-YYYY-ID" in the file name, also if written |
| 170 | # with small letters. Not supporting multiple CVE id's in a single | 170 | # in lowercase. Possible to have multiple CVE IDs in a single |
| 171 | # file name. | 171 | # file name, but only the last one will be detected from the file name. |
| 172 | # However, patch files contents addressing multiple CVE IDs are supported | ||
| 173 | # (cve_match regular expression) | ||
| 174 | |||
| 172 | cve_file_name_match = re.compile(".*([Cc][Vv][Ee]\-\d{4}\-\d+)") | 175 | cve_file_name_match = re.compile(".*([Cc][Vv][Ee]\-\d{4}\-\d+)") |
| 173 | 176 | ||
| 174 | patched_cves = set() | 177 | patched_cves = set() |
