]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
cve-check: write empty fragment files in the text mode
authorMarta Rybczynska <rybczynska@gmail.com>
Fri, 3 Jun 2022 12:17:10 +0000 (14:17 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 6 Jun 2022 12:35:29 +0000 (13:35 +0100)
commitf1b7877acd0f6e3626faa57d9f89809cfcdfd0f1
tree54a4f5f7b6747d41d5cfa578a9a4c535666ffb7a
parentdebd37abcdde8788761ebdb4a05bc61f7394cbb8
cve-check: write empty fragment files in the text mode

In the cve-check text mode output, we didn't write fragment
files if there are no CVEs (if CVE_CHECK_REPORT_PATCHED is 1),
or no unpached CVEs otherwise.

However, in a system after multiple builds,
cve_check_write_rootfs_manifest might find older files and use
them as current, what leads to incorrect reporting.

Fix it by always writing a fragment file, even if empty.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/cve-check.bbclass