farol/farolluz: farolluz/cvrf.py comparison

comparison farolluz/cvrf.py @ 17:90852c11fabd

Add methods to extract Product references in a document.

author	Benoît Allard <benoit.allard@greenbone.net>
date	Tue, 14 Oct 2014 16:48:22 +0200
parents	dcc946b30343
children	4b53e7bcff0d

comparison

equal deleted inserted replaced

-:858d8c0b49e2
+:90852c11fabd
 def getNote(self, ordinal):
 for note in self._notes:
 if note._ordinal == ordinal:
 return note
 return None
+def mentionsProdId(self, productid):
+""" Returns in which sub element, self is mentioning the productid """
+for category in (self._productstatuses, self._threats, self._cvsss, self._remediations):
+for subelem in category:
+if productid in subelem._productids:
+yield subelem
+def isMentioningProdId(self, productid):
+""" Returns if self is mentioning the productid """
+for e in self.mentionsProdId(productid):
+# We only need to know if the generator yield at least one elem.
+return True
+return False
+def mentionsGroupId(self, groupid):
+for category in (self._threats, self._remediations):
+for subelem in category:
+if groupid in subelem._groupids:
+yield subelem
+def isMentioningGroupId(self, groupids):
+""" Make sure you call this with a list (not a generator or a tuple)
+when wished """
+if not isinstance(groupids, list):
+groupids = [groupids]
+for groupid in groupids:
+print "testing GroupId: ", groupid
+for _ in self.mentionsGroupId(groupid):
+# We only need to know if the generator yield at least one elem.
+print 'True'
+return True
+print 'False'
+return False
 def validate(self, productids, groupids):
 if not self._ordinal:
 raise ValidationError('A Vulnerability must have an ordinal')
 if self._id is not None:
 reference.validate()
 for acknowledgment in self._acknowledgments:
 acknowledgment.validate()
 class CVRFInvolvement(object):
 PARTIES = CVRFPublisher.TYPES
 STATUSES = ('Open', 'Disputed', 'In Progress', 'Completed',
 'Contact Attempted', 'Not Contacted')
 def __init__(self, party, status):
 class CVRFProductStatus(object):
 TYPES = ('First Affected', 'Known Affected', 'Known Not Affected',
 'First Fixed', 'Fixed', 'Recommended', 'Last Affected')
+NAME = "Product Status"
 def __init__(self, _type):
 self._type = _type
 self._productids = []
 def addProductID(self, productid):
 raise ValidationError('Unknown ProductID: %s' % productid)
 class CVRFThreat(object):
 TYPES = ('Impact', 'Exploit Status', 'Target Set')
+NAME = "Threat"
 def __init__(self, _type, description):
 self._type = _type
 self._description = description
 self._date = None
 self._productids = []
 'AC': {'H':0.35, 'M':0.61 ,'L':0.71},
 'Au': {'M':0.45, 'S':0.56, 'N':0.704},
 'C': {'N':0.0, 'P':0.275, 'C':0.66},
 'I': {'N':0.0, 'P':0.275, 'C':0.66},
 'A': {'N':0.0, 'P':0.275, 'C':0.66}}
+NAME = "CVSS Score Set"
 def __init__(self, basescore):
 self._basescore = basescore
 self._temporalscore = None
 self._environmentalscore = None
 self._vector = None
 class CVRFRemediation(object):
 TYPES = ('Workaround', 'Mitigation', 'Vendor Fix', 'None Available',
 'Will Not Fix')
+NAME = "Remediation"
 def __init__(self, _type, description):
 self._type = _type
 self._description = description
 self._date = None
 self._entitlement = None
 if status._type != type_:
 continue
 for productid in status._productids:
 products.add(productid)
 return set(self.getProductForID(p) for p in products)
+def isProductOrphan(self, productid):
+""" Returns if a productid is mentionned nowhere in the document """
+# We first look at the ProductTree
+ptree = self._producttree
+for relation in ptree._relationships:
+if productid == relation._productreference:
+return False
+if productid == relation._relatestoproductreference:
+return False
+groupids = [g._groupid for g in ptree._groups if productid in g._productids]
+if len(groupids) > 0:
+return False
+# Go through all the Vulnerabilities
+for vulnerability in self._vulnerabilities:
+if vulnerability.isMentioningProdId(productid):
+return False
+for groupid in groupids:
+if vulnerability.isMentioningGroupId(groupid):
+return False
+return True
 def getNote(self, ordinal):
 for note in self._notes:
 if note._ordinal == ordinal:
 return note

Mercurial > farol > farolluz

comparison farolluz/cvrf.py @ 17:90852c11fabd