[libvirt] [security-notice PATCH 1/9] scripts: change data structures used to track branches & tags

[Ján Tomko]

On Mon, May 13, 2019 at 12:51:58PM +0100, Daniel P. Berrangé wrote:
>We need to track more info against each branch, so use a more
>advanced data structure.
>
>Signed-off-by: Daniel P. Berrangé <berrange at redhat.com>
>---
> scripts/report-vulnerable-tags.pl | 53 ++++++++++++++++++++++---------
> 1 file changed, 38 insertions(+), 15 deletions(-)
>
>diff --git a/scripts/report-vulnerable-tags.pl b/scripts/report-vulnerable-tags.pl
>index 0b6ea6f..14d31c0 100644
>--- a/scripts/report-vulnerable-tags.pl
>+++ b/scripts/report-vulnerable-tags.pl

[...]

> }
>
>
>-foreach my $branch (sort versioncmp @branches) {
>+foreach my $branch (sort versioncmp keys %branches) {
>     print "    <branch>\n";
>     print "      <name>$branch</name>\n";
>-    foreach my $tag (sort versioncmp @{$branches{$branch}}) {
>+    foreach my $tag (sort versioncmp keys %{$branches{$branch}->{"brokentags"}}) {
>         print "      <tag state=\"vulnerable\">$tag</tag>\n";
>     }
>-    print "      <change state=\"vulnerable\">$changeset</change>\n";
>+    foreach my $commit (@{$branches{$branch}->{"brokenchanges"}}) {
>+	print "      <change state=\"vulnerable\">$commit</change>\n";

  ^ TAB

>+    }
>
>     if ($branch eq "master") {
> 	print "      <change state=\"fixed\"></change>\n";

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20190614/2d7a3aae/attachment-0001.sig>