scripts/process-fixed-cves.sh

   1 #!/bin/bash -e
   2 # Copyright The GNU Toolchain Authors.
   3 # This file is part of the GNU C Library.
   4 #
   5 # The GNU C Library is free software; you can redistribute it and/or
   6 # modify it under the terms of the GNU Lesser General Public
   7 # License as published by the Free Software Foundation; either
   8 # version 2.1 of the License, or (at your option) any later version.
   9 #
  10 # The GNU C Library is distributed in the hope that it will be useful,
  11 # but WITHOUT ANY WARRANTY; without even the implied warranty of
  12 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13 # Lesser General Public License for more details.
  14 #
  15 # You should have received a copy of the GNU Lesser General Public
  16 # License along with the GNU C Library; if not, see
  17 # <https://www.gnu.org/licenses/>.
  18
  19 if ! [ -d advisories ]; then
  20   echo "error: Run me from the toplevel directory of the glibc repository."
  21   exit 1
  22 fi
  23
  24 release=$(echo RELEASE | gcc -E -include version.h -o - - | grep -v "^#")
  25 minor=$(echo __GLIBC_MINOR__ | gcc -E -include include/features.h -o - - |
  26         grep -v "^#")
  27
  28 if [ $release = "\"development\"" ]; then
  29   cur_rel=2.$((minor + 1))
  30 else
  31   cur_rel=2.$minor
  32 fi
  33
  34 for f in $(grep -l "^Fix-Commit: .* ($cur_rel)$" advisories/*); do
  35   echo -e "  $(basename $f):"
  36   cve_id=$(sed -n 's/CVE-Id: \(.*\)/\1/p' $f)
  37   echo "$(head -1 $f) ($cve_id)" | fold -w 68 -s | while read line; do
  38     echo "    $line"
  39   done
  40   echo
  41 done