amaharaneko/guix-mirrors
1
1
Fork 0
mirror of https://codeberg.org/guix/guix.git synced 2025-10-02 02:15:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

lint: cve: Catch HTTP GET errors.

Browse source 
Fixes a bug where ‘guix lint -c cve’ would crash when nvd.nist.gov
returns 503 or similar.

* guix/lint.scm (current-vulnerabilities*): Wrap
‘current-vulnerabilities’ call in ‘guard’ and return the empty list in
case of ‘http-get-error?’.

Change-Id: I76d5f22c260999154af7b73630f783555747aa7a
This commit is contained in:
Ludovic Courtès 2025-04-01 14:46:31 +02:00
parent 7b2fe2824b
commit eb04a0d2c9
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5
1 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

12
guix/lint.scm
View file

@ -1,7 +1,7 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2014 Cyril Roelandt <tipecaml@gmail.com>
;;; Copyright © 2014, 2015 Eric Bavier <bavier@member.fsf.org>
;;; Copyright © 2013-2024 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2013-2025 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2015, 2016 Mathieu Lirzin <mthl@gnu.org>
;;; Copyright © 2016 Danny Milosavljevic <dannym+a@scratchpost.org>
;;; Copyright © 2016 Hartmut Goebel <h.goebel@crazy-compilers.com>
@ -1573,7 +1573,15 @@ or HTTP errors. This allows network-less operation and makes problems with
the NIST server non-fatal."
(with-networking-fail-safe (G_ "while retrieving CVE vulnerabilities")
'()
(current-vulnerabilities #:timeout 4)))
(guard (c ((http-get-error? c)
(warning (G_ "failed to get list of \
CVE vulnerabilities from '~a': ~a (~a)~%")
(uri->string
(http-get-error-uri c))
(http-get-error-code c)
(http-get-error-reason c))
'()))
(current-vulnerabilities #:timeout 4))))
(define package-vulnerabilities
(let ((lookup (delay (vulnerabilities->lookup-proc