support/scripts/pkg-stats: properly ignore CVEs in <pkg>_IGNORE_CVES
authorThomas Petazzoni <thomas.petazzoni@bootlin.com>
Tue, 18 Feb 2020 23:35:26 +0000 (00:35 +0100)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Sat, 7 Mar 2020 14:58:41 +0000 (15:58 +0100)
It seems like throughout the series that the CVE pkg-stats support
went through, the support for ignoring CVEs in the per-package
<pkg>_IGNORE_CVES variable was forgotten.

Let's re-introduce this, which is now very simple thanks to the CVE
class, its .identifier() propertly and the .is_cve_ignored() method of
the Package class

Cc: Titouan Christophe <titouan.christophe@railnova.eu>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
support/scripts/pkg-stats

index 01a0a0d53d25348954d3ae79bc0ac19d96bd72ba..7721d98459c264f73cdc4f517bad0a5e14077020 100755 (executable)
@@ -260,6 +260,9 @@ class CVE:
         True if the Buildroot Package object passed as argument is affected
         by this CVE.
         """
+        if br_pkg.is_cve_ignored(self.identifier):
+            return False
+
         for product in self.each_product():
             if product['product_name'] != br_pkg.name:
                 continue