;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (test-cve)
  #:use-module (guix cve)
  #:use-module (srfi srfi-1)
  #:use-module (srfi srfi-64))

(define %sample
  (search-path %load-path "tests/cve-sample.xml"))

(define (vulnerability id packages)
  (make-struct (@@ (guix cve) <vulnerability>) 0 id packages))

(define %expected-vulnerabilities
  ;; What we should get when reading %SAMPLE.
  (list
   ;; CVE-2003-0001 has no "/a" in its product list so it is omitted.
   ;; CVE-2004-0230 lists "tcp" as an application, but lacks a version number.
   (vulnerability "CVE-2008-2335" '(("phpvid" "1.2" "1.1")))
   (vulnerability "CVE-2008-3522" '(("enterprise_virtualization" "3.5")
                                    ("jasper" "1.900.1")))
   (vulnerability "CVE-2009-3301" '(("openoffice.org" "2.3.0" "2.2.1" "2.1.0")))
   ;; CVE-2015-8330 has no software list.
   ))


(test-begin "cve")

(test-equal "xml->vulnerabilities"
  %expected-vulnerabilities
  (call-with-input-file %sample xml->vulnerabilities))

(test-equal "vulnerabilities->lookup-proc"
  (list (list (first %expected-vulnerabilities))
        '()
        '()
        (list (second %expected-vulnerabilities))
        (list (third %expected-vulnerabilities)))
  (let* ((vulns  (call-with-input-file %sample xml->vulnerabilities))
         (lookup (vulnerabilities->lookup-proc vulns)))
    (list (lookup "phpvid")
          (lookup "jasper" "2.0")
          (lookup "foobar")
          (lookup "jasper" "1.900.1")
          (lookup "openoffice.org" "2.3.0"))))

(test-end "cve")
ass='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/doc/local.mk?id=dec4b3aa18e24466841244c3e34b255201bbcc9e&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2019-05-13 10:46:03 +0200'>2019-05-13</span></td><td><a href='/guix/commit/doc/local.mk?id=3bac7e6495934de9913e6186d954d1331883e064'>doc: Add Russian translation.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-05-04 23:07:38 +0200'>2019-05-04</span></td><td><a href='/guix/commit/doc/local.mk?id=227ff747a640dd017bcca087e14b244afc1bd958'>doc: Warn about missing entries in htmlxref.cnf.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-24 00:27:51 +0200'>2019-04-24</span></td><td><a href='/guix/commit/doc/local.mk?id=de712e5286137c297de8270d3396b8daa9a93c66'>doc: Add Simplified Chinese translation.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-23 23:56:16 +0200'>2019-04-23</span></td><td><a href='/guix/commit/doc/local.mk?id=6227e1b7477b71f31ea3bf8a74c32fe7238dcece'>doc: Add Spanish translation.</a><span class='msg-avail'>...</span></td><td>Miguel Ángel Arruga Vivas</td></tr>
<tr><td><span title='2019-03-13 23:12:43 +0100'>2019-03-13</span></td><td><a href='/guix/commit/doc/local.mk?id=e1c15e8b8e25e14c253ff1212e289565736f6ea7'>doc: Document the graphical installer some more.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-11-01 12:36:47 +0100'>2018-11-01</span></td><td><a href='/guix/commit/doc/local.mk?id=1e40e70bfebba47ccea354ddf862276d2c4223ea'>doc: Add German translation.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-04-29 21:42:14 +0200'>2018-04-29</span></td><td><a href='/guix/commit/doc/local.mk?id=39764ef893b7b65a8ce55e13746fed8fd0bad6e0'>build: Use only one domain for guix-manual.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-04-25 23:11:53 +0200'>2018-04-25</span></td><td><a href='/guix/commit/doc/local.mk?id=06c4778ae290c9f8de5f8ef1683cec14de8f2ebc'>build: Add silent rules for Texinfo xref translation.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-04-19 21:32:07 +0200'>2018-04-19</span></td><td><a href='/guix/commit/doc/local.mk?id=bf5c74e713c623cbb0001eb36af6998e92243482'>gnu: doc: Add French documentation.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-04-19 21:30:30 +0200'>2018-04-19</span></td><td><a href='/guix/commit/doc/local.mk?id=b9fe8fd662180e64156d2b95a671242c20f0acfc'>gnu: doc: Allow documentation to be translated.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-01-20 00:45:29 +0100'>2018-01-20</span></td><td><a href='/guix/commit/doc/local.mk?id=523790d11d4d4d786e7b2ad19d3333e9fffb016d'>build: Declare “doc/guix.texi“ dependencies.</a><span class='msg-avail'>...</span></td><td>Mathieu Lirzin</td></tr>
<tr><td><span title='2017-01-12 14:59:36 +0100'>2017-01-12</span></td><td><a href='/guix/commit/doc/local.mk?id=409c5733224f714096d0e2a665b85d64c96c7088'>build: Remove reference to 'doc/emacs.texi'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2016-05-24 13:07:19 +0200'>2016-05-24</span></td><td><a href='/guix/commit/doc/local.mk?id=c0d2e7b197a3c511eb1bf60b61ee6fdc673e36f4'>build: Use "%D%" in Makefile fragments.</a><span class='msg-avail'>...</span></td><td>Mathieu Lirzin</td></tr>
<tr><td><span title='2016-04-21 18:47:50 +0200'>2016-04-21</span></td><td><a href='/guix/commit/doc/local.mk?id=03d0e2d2b9f9cc3be8e871842c11df9453e903bd'>build: Move 'Makefile' fragments to subdirectories.</a><span class='msg-avail'>...</span></td><td>Mathieu Lirzin</td></tr>