mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 07:51:59 -09:00
b4d919a0cd
The each_cpe() method is careful that some CVEs have no "configurations", but some CVEs such as https://nvd.nist.gov/vuln/detail/CVE-2025-32915 apparently have a "configurations" node, but no "nodes" inside the "configurations", causing an exception: Traceback (most recent call last): File "/home/buildroot/buildroot-stats/./support/scripts/pkg-stats", line 1382, in <module> __main__() File "/home/buildroot/buildroot-stats/./support/scripts/pkg-stats", line 1371, in __main__ check_package_cves(args.nvd_path, packages) File "/home/buildroot/buildroot-stats/./support/scripts/pkg-stats", line 679, in check_package_cves check_package_cve_affects(cve, cpe_product_pkgs) File "/home/buildroot/buildroot-stats/./support/scripts/pkg-stats", line 638, in check_package_cve_affects for product in cve.affected_products: ^^^^^^^^^^^^^^^^^^^^^ File "/home/buildroot/buildroot-stats/support/scripts/cve.py", line 185, in affected_products return set(cpe_product(p['id']) for p in self.each_cpe()) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildroot/buildroot-stats/support/scripts/cve.py", line 185, in <genexpr> return set(cpe_product(p['id']) for p in self.each_cpe()) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildroot/buildroot-stats/support/scripts/cve.py", line 173, in each_cpe for node in nodes['nodes']: ~~~~~^^^^^^^^^ KeyError: 'nodes' Fixes:54f8d97c91("support/scripts/pkg-stats: adapt to NVD v2 json format") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [Romain: - add reference to buildroot commit introducing the issue - a similar patch was sent by Daniel Lang (thanks!) - needed on 2025.02.x to fix "Daily results" email] (cherry picked from commit67422b9d9c) Signed-off-by: Romain Naour <romain.naour@smile.fr>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at http://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches