From: Joshua Watt <JPEWhacker@gmail.com>
Date: Mon, 14 Apr 2025 15:47:44 +0000 (-0600)
Subject: lib/oe/cve_check: Mark variable flag dependencies
X-Git-Tag: uninative-4.8~751
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2cc43c72ff28aa39a417dd8d57cd7c8741c0e541;p=thirdparty%2Fopenembedded%2Fopenembedded-core.git

lib/oe/cve_check: Mark variable flag dependencies

Marks CVE check functions which depend on non-constant variable flags as
depending on the variables. This allows changes in the flags to
correctly trigger a rebuild

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/lib/oe/cve_check.py b/meta/lib/oe/cve_check.py
index 5c272ba4ff3..5ace3cf5533 100644
--- a/meta/lib/oe/cve_check.py
+++ b/meta/lib/oe/cve_check.py
@@ -153,6 +153,7 @@ def parse_cves_from_patch_file(patch_file):
     return cve_ids
 
 
+@bb.parse.vardeps("CVE_STATUS")
 def get_patched_cves(d):
     """
     Determines the CVE IDs that have been solved by either patches incuded within
@@ -289,6 +290,7 @@ def convert_cve_version(version):
 
     return version + update
 
+@bb.parse.vardeps("CVE_STATUS", "CVE_CHECK_STATUSMAP")
 def decode_cve_status(d, cve):
     """
     Convert CVE_STATUS into status, vendor, product, detail and description.