;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (test-cve)
  #:use-module (guix cve)
  #:use-module (srfi srfi-1)
  #:use-module (srfi srfi-64))

(define %sample
  (search-path %load-path "tests/cve-sample.xml"))

(define (vulnerability id packages)
  (make-struct (@@ (guix cve) <vulnerability>) 0 id packages))

(define %expected-vulnerabilities
  ;; What we should get when reading %SAMPLE.
  (list
   ;; CVE-2003-0001 has no "/a" in its product list so it is omitted.
   ;; CVE-2004-0230 lists "tcp" as an application, but lacks a version number.
   (vulnerability "CVE-2008-2335" '(("phpvid" "1.2" "1.1")))
   (vulnerability "CVE-2008-3522" '(("enterprise_virtualization" "3.5")
                                    ("jasper" "1.900.1")))
   (vulnerability "CVE-2009-3301" '(("openoffice.org" "2.3.0" "2.2.1" "2.1.0")))
   ;; CVE-2015-8330 has no software list.
   ))


(test-begin "cve")

(test-equal "xml->vulnerabilities"
  %expected-vulnerabilities
  (call-with-input-file %sample xml->vulnerabilities))

(test-equal "vulnerabilities->lookup-proc"
  (list (list (first %expected-vulnerabilities))
        '()
        '()
        (list (second %expected-vulnerabilities))
        (list (third %expected-vulnerabilities)))
  (let* ((vulns  (call-with-input-file %sample xml->vulnerabilities))
         (lookup (vulnerabilities->lookup-proc vulns)))
    (list (lookup "phpvid")
          (lookup "jasper" "2.0")
          (lookup "foobar")
          (lookup "jasper" "1.900.1")
          (lookup "openoffice.org" "2.3.0"))))

(test-end "cve")
ckages</a>/<a href='/guix/log/gnu/packages/cdrom.scm?id=b05e5030a35ce698a70741c51137ebba64f017db'>cdrom.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/cdrom.scm?id=b05e5030a35ce698a70741c51137ebba64f017db&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-07-16 02:16:37 +0200'>2023-07-16</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=f1b546af68cc097c02a0ead2a8a3bb65d4022a04'>gnu: libisofs: Update to 1.5.6.pl01.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2023-07-16 02:16:37 +0200'>2023-07-16</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=72bd1abaee2b87b3c6aadda50c186177f00f559a'>gnu: libburn: Update to 1.5.6.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2023-07-11 15:53:26 +0200'>2023-07-11</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=b27d3265c61808028f4b4426bdd0eb5408550021'>gnu: xorriso: Update to 1.5.6.pl02</a><span class='msg-avail'>...</span></td><td>Andy Tai</td></tr>
<tr><td><span title='2023-04-14 17:15:08 -0400'>2023-04-14</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=3bacd3c76a58ebe70f98be654f09cbd4166093ab'>Merge branch 'master' into core-updates.</a><span class='msg-avail'>...</span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2023-04-05 16:29:27 +0200'>2023-04-05</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=f59d94d236d3ca8bcb8bda1280452d4541d28d75'>gnu: cdrdao: Update to 1.2.5.</a><span class='msg-avail'>...</span></td><td>Andreas Enge</td></tr>
<tr><td><span title='2023-03-23 21:45:21 -0400'>2023-03-23</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=839bb4616f13171a23ad7937bf57d0a01d61d42a'>Merge remote-tracking branch 'origin/master' into staging.</a><span class='msg-avail'>...</span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2023-02-19 01:00:01 +0100'>2023-02-19</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=1e6ddceb8318d413745ca1c9d91fde01b1e0364b'>gnu: Use HTTPS package home pages wherever possible.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2022-12-02 19:13:45 +0100'>2022-12-02</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=f2b6350a507158b2a0ed28ada69d8ca3f544d5e5'>Merge branch 'master' into staging</a></td><td>Marius Bakke</td></tr>
<tr><td><span title='2022-12-02 19:08:27 +0100'>2022-12-02</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=f16358144f29dab64245669d285bff672371b91a'>gnu: wxWidgets: Update to 3.2.1.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2022-11-23 20:45:13 +0100'>2022-11-23</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=74100ba40f50a0a6def57e0f645c1f5a7ab68977'>gnu: libcdio: Fix test failure with glibc 2.36.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2022-10-23 02:00:07 +0200'>2022-10-23</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=5dda4c69f075dcee020e51f4559cb3df4d2336c4'>gnu: xorriso: Update to 1.5.4.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2022-08-07 02:00:00 +0200'>2022-08-07</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=dda3a760ab4b1e8dce9797cecd09fefa9c25cb68'>gnu: dvdisaster: Use G-expressions.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2022-08-07 02:00:00 +0200'>2022-08-07</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=ced32e953db137fff64bddbc41bacd300d13c79b'>gnu: dvdisaster: Update to 0.79.10.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2022-08-07 02:00:00 +0200'>2022-08-07</span></td><td><a href='/guix/commit/gnu/packages/cdrom.scm?id=22c91ab5d320e482e9c51fa7829b5b12c859d4d6'>gnu: dvdisaster: Remove input labels.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>