~ruther/guix-local

f888c0b1207a92b0d7af4dcf7fb73cecd1f0b34f — Ludovic Courtès 10 years ago 7b78f35
lint: cve: Catch host name lookup errors.

* guix/scripts/lint.scm (package-vulnerabilities): Catch
'getaddrinfo-error'.
1 files changed, 11 insertions(+), 2 deletions(-)

M guix/scripts/lint.scm
M guix/scripts/lint.scm => guix/scripts/lint.scm +11 -2
@@ 1,7 1,7 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2014 Cyril Roelandt <tipecaml@gmail.com>
;;; Copyright © 2014, 2015 Eric Bavier <bavier@member.fsf.org>
;;; Copyright © 2013, 2014, 2015 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2013, 2014, 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2015 Mathieu Lirzin <mthl@openmailbox.org>
;;;
;;; This file is part of GNU Guix.


@@ 593,7 593,16 @@ Common Platform Enumeration (CPE) name."

(define package-vulnerabilities
  (let ((lookup (delay (vulnerabilities->lookup-proc
                        (current-vulnerabilities)))))
                        ;; Catch networking errors to allow network-less
                        ;; operation.
                        (catch 'getaddrinfo-error
                          (lambda ()
                            (current-vulnerabilities))
                          (lambda (key errcode)
                            (warn (_ "failed to lookup NIST host: ~a~%")
                                  (gai-strerror errcode))
                            (warn (_ "assuming no CVE vulnerabilities~%"))
                            '()))))))
    (lambda (package)
      "Return a list of vulnerabilities affecting PACKAGE."
      ((force lookup)