;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (test-cve)
  #:use-module (guix cve)
  #:use-module (srfi srfi-1)
  #:use-module (srfi srfi-64))

(define %sample
  (search-path %load-path "tests/cve-sample.xml"))

(define (vulnerability id packages)
  (make-struct (@@ (guix cve) <vulnerability>) 0 id packages))

(define %expected-vulnerabilities
  ;; What we should get when reading %SAMPLE.
  (list
   ;; CVE-2003-0001 has no "/a" in its product list so it is omitted.
   ;; CVE-2004-0230 lists "tcp" as an application, but lacks a version number.
   (vulnerability "CVE-2008-2335" '(("phpvid" "1.2" "1.1")))
   (vulnerability "CVE-2008-3522" '(("enterprise_virtualization" "3.5")
                                    ("jasper" "1.900.1")))
   (vulnerability "CVE-2009-3301" '(("openoffice.org" "2.3.0" "2.2.1" "2.1.0")))
   ;; CVE-2015-8330 has no software list.
   ))


(test-begin "cve")

(test-equal "xml->vulnerabilities"
  %expected-vulnerabilities
  (call-with-input-file %sample xml->vulnerabilities))

(test-equal "vulnerabilities->lookup-proc"
  (list (list (first %expected-vulnerabilities))
        '()
        '()
        (list (second %expected-vulnerabilities))
        (list (third %expected-vulnerabilities)))
  (let* ((vulns  (call-with-input-file %sample xml->vulnerabilities))
         (lookup (vulnerabilities->lookup-proc vulns)))
    (list (lookup "phpvid")
          (lookup "jasper" "2.0")
          (lookup "foobar")
          (lookup "jasper" "1.900.1")
          (lookup "openoffice.org" "2.3.0"))))

(test-end "cve")
98aa7899b75b5f8a0971589da4b9f10'>packages</a>/<a href='/guix/log/gnu/packages/patchutils.scm?id=ddeb07d0b98aa7899b75b5f8a0971589da4b9f10'>patchutils.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/patchutils.scm?id=ddeb07d0b98aa7899b75b5f8a0971589da4b9f10&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-06-26 09:59:07 +0100'>2023-06-26</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=e11cf1d859064e9bd8ddda1511241427ef22e330'>gnu: patchwork: Update to 3.1.1.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (patchwork): Update to 3.1.1.

Signed-off-by: Christopher Baines &lt;mail@cbaines.net&gt;
</span></span></td><td>Andy Tai</td></tr>
<tr><td><span title='2023-06-02 16:27:41 +0200'>2023-06-02</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=7469d9c1067bdf177e30474e4b07a4cbb4a326c3'>gnu: Add coccinelle.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (coccinelle): New variable.

Signed-off-by: Jean-Pierre De Jesus DIAZ &lt;jean@foundationdevices.com&gt;
Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Jean-Pierre De Jesus DIAZ</td></tr>
<tr><td><span title='2023-05-02 14:05:49 -0500'>2023-05-02</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=83f4640fdf370ae1b6677cb606b0a3296810beb7'>gnu: quilt: Fix wrapping and improve testing.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (quilt)[native-inputs]: Use new style; fixes
lint warning.
[inputs]: Add bash-minimal, gzip, diffutils, findutils, and tar.
[arguments]: Move check phase after other install.  Simplify wrapping and wrap
one utility script.  Run tests with PATH unset and test scripts patched to
detect insufficient wrapping.
</span></span></td><td>Eric Bavier</td></tr>
<tr><td><span title='2023-05-02 15:11:57 +0300'>2023-05-02</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=18f7954b4bf1655ba44ab958dba9d807e7f6cb19'>gnu: quilt: Update to 0.67.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (quilt): Update to 0.67.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-05-02 15:11:57 +0300'>2023-05-02</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=3988a81c10d246284a8f8ad8952b29c39dbad94c'>gnu: quilt: Patch for newer grep.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (quilt)[source]: Add patch to work with
newer versions of grep.
* gnu/packages/patches/quilt-grep-compat.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2023-03-27 16:39:53 +0100'>2023-03-27</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=efbfda0dac514f73585d85268b3c2248b34668e3'>gnu: colordiff: Update to 1.0.21.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (colordiff): Update to 1.0.21.

Signed-off-by: Christopher Baines &lt;mail@cbaines.net&gt;
</span></span></td><td>Greg Hogan</td></tr>
<tr><td><span title='2023-03-05 08:17:57 +0100'>2023-03-05</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=7fc415aba9444fff0f840892cf01f588d67e698c'>gnu: meld: Use new package style.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (meld)[arguments]: Convert to list of
G-Expressions.
&lt;#:phases&gt;: Drop trailing #t.
[inputs, native-inputs]: Drop labels.

Signed-off-by: Liliana Marie Prikler &lt;liliana.prikler@gmail.com&gt;
</span></span></td><td>Andy Tai</td></tr>
<tr><td><span title='2023-03-05 08:17:56 +0100'>2023-03-05</span></td><td><a href='/guix/commit/gnu/packages/patchutils.scm?id=f9f9efc467ce8678e815d6aed848026b4ffdfbc9'>gnu: meld: Update to 3.22.0</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patchutils.scm (meld): Update to 3.22.0
[build-system]: Switch to meson-build-system.
[native-inputs]: Add desktop-file-utils, itstool, gobject-introspection,
pkg-config, and python.
[inputs]: Add bash-minimal, python, and python-pycairo.
Replace gtksourceview-3 with gtksourceview-4.
[arguments]: Add #:glib-or-gtk?, #:imported-modules, and #:modules.
&lt;#:phases&gt;: Remove custom ‘install’ and ‘check’.
Add ‘skip-gtk-update-icon-cache’.
Adjust ‘copy-styles’ to gtksourceview-4.
Replace ‘wrap-typelib’ with ‘python-and-gi-wrap’.

Signed-off-by: Liliana Marie Prikler &lt;liliana.prikler@gmail.com&gt;
</span></span></td><td>Andy Tai</td></tr>