mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-08 23:51:08 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/pkg-generic.mk: Set <pkg>_CPE_ID_UPDATE to NA by default

Browse Source 
The commit [1] set the default value of '<pkg>_CPE_ID_UPDATE' to not use
a wildcard by default. But instead of setting the value to '-' it set it
to an empty value instead.

According to document [2] section 6.1.2.1.1 the 'Not Attributed' value
bind to an hyphen ('-') and the blank statement bind to the 'Any' ('*').

Because the CPE matching function was incorrect using a blank statement
worked to remove the false positives but this is not correct according
to the CPE documentation.

[1] 53a8616460 package/pkg-generic.mk: use more sensible default value for <pkg>_CPE_ID_UPDATE
[2] https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf

Fixes: 53a8616460.
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 8430ca7c28)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2025-11-03 22:11:43 +01:00
parent 6ed83c91aa
commit 053c52a094
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/pkg-generic.mk
View File

@@ -727,6 +727,8 @@ ifeq ($$($(2)_CPE_ID_VALID),YES)
ifndef $(2)_CPE_ID_UPDATE
ifdef $(3)_CPE_ID_UPDATE
$(2)_CPE_ID_UPDATE = $$($(3)_CPE_ID_UPDATE)
else
$(2)_CPE_ID_UPDATE = -
endif
endif