]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
cve-update-db-native: skip on empty cpe23Uri
authorKonrad Weihmann <kweihmann@outlook.com>
Thu, 22 Apr 2021 16:48:27 +0000 (18:48 +0200)
committerAnuj Mittal <anuj.mittal@intel.com>
Fri, 23 Apr 2021 15:14:40 +0000 (23:14 +0800)
commite9776c55cf251fc884ac3ce4fd6c96769b1d17ff
tree4f7893b6955225ab06c6ff95c58009aa31c63d93
parent147a08dced5e565f19f4987a3c199780dc00f878
cve-update-db-native: skip on empty cpe23Uri

Recently an entry in the NVD DB appeared that looks like that
{'vulnerable': True, 'cpe_name': []}.
As besides all the vulnerable flag no data is present we would get
a KeyError exception on acccess.
Use get method on dictionary and return if no meta data is present
Also quit if the length of the array after splitting is less than 6

Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 00ce2796d97de2bc376b038d0ea7969088791d34)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
meta/recipes-core/meta/cve-update-db-native.bb