K6h# @ d Z ddlZddlZddlZddlmZ ddlmZmZ ddl m
Z
m Z ddl m
Z
mZmZ ddlmZmZ G d d
e
Ze G d d Ze G d
d Z G d dej Z G d de Z G d de ZdS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N) defaultdict) dataclassfield)
NamedTupleOptional )DBPatchDependencyMatch VersionMatch)HashCalculator get_base_dirc X e Zd ZU eed< eed< dZee ed< dZee ed< dS )FileIdentifierrel_pathhashNvuln_id vuln_type) __name__
__module__ __qualname__str__annotations__r r intr U/opt/imunify360/venv/lib/python3.11/site-packages/imav/patchman/fs_scanner/matcher.pyr r ! sL MMM
III !GXc]!!! #Ix}#####r r c \ e Zd ZU eed< eed< ee ed< ee Z
e ed< dS )VersionIdentifieridr file_identifiers)default_factorymatched_base_dirsN) r r r r r r listr r setr" r r r r r ( sS GGG
III>**** "U3 7 7 7s77777r r c & e Zd ZU ee ed< dS )PatchDependencyfilesN)r r r r# r r r r r r& r& 1 s# r r& c ` e Zd ZdefdZej dedeeee f fd Z
dS )Matcher
input_filec : | | | _ d S N) _parse_inputdict_of_identifiers)selfr* s r __init__zMatcher.__init__7 s #'#4#4Z#@#@ r file_pathreturnc d S r, r )r/ r1 s r r- zMatcher._parse_input: s r N) r r r r r0 abcabstractmethoddictr# tupler- r r r r) r) 6 st A3 A A A A
c
d3U 3C.D
r r) c e Zd Zededee fd Zdedee fdZ
dede eee f fdZ de d ed
e
defd Zd ed
eded
e
fdZdS )VersionsMatcher file_hashesr2 c | d }d t |dd d |d d d D S )N|c 4 g | ]\ }}t || S r r ).0r hash_s r
z:VersionsMatcher._parse_path_hash_pairs..E s6
%
8U + +
r r )stripsplitzip)r: partss r _parse_path_hash_pairsz&VersionsMatcher._parse_path_hash_pairs@ sb !!##))#..
#&uQTT{E##A#J#?#?
r linec | d \ }}}}|dk rd S t ||| | S )N:+)rC rD r rG )r/ rH stateid_r@ r: s r _parse_linezVersionsMatcher._parse_lineJ s] *. ););C)@)@&sE; C<<4 33K@@
r r1 c t t }t |d 5 }|D ]D}| | x}r+||j d j | E d d d n # 1 swxY w Y |S )Nrr )r r# openrN r r append)r/ r1 plugins_identifiers_by_pathfilerH new_identifiers r r- z VersionsMatcher._parse_inputT s
$ )S
!
! -T
-
-%)%5%5d%;%;;> -/&7:C f^,,,
- - - - - - - - - - - - - - - - +*s AA::A>A>plugin_identifierbase_dirhash_calculatorc D |j D ]G}t j t j ||j s dS H|j D ]H}| t j ||j d |j k r dS IdS )NFT)apply_normalization)r ospathisfilejoinr calc_hashr )r/ rV rW rX file_identifiers r has_full_matchz VersionsMatcher.has_full_matchd s 1 A O7>> X'?@@
uu
1 A O ))GLL?+CDD(, * #' ( ( uu
( tr full_path
relative_pathdbc F d}| j |g D ]}t || }||j vrg| ||| rP|j | |j t |j ||j
d}|S )NF)r r\ r T) r. getr
r" ra addversions_matchesbuffered_insertr r r )r/ rb rc rd rX
is_matchedrV rW s r match_and_savez VersionsMatcher.match_and_save| s
!%!9!=!= 2"
"
" " $I}==H 1 CCC''%x D
"377AAA#33 ,/ % . 3 "
r N)r r r staticmethodr r# r rG r r rN r6 r- r boolra r rk r r r r9 r9 ? s
C
D 4H
\
1B(C
+ +
c4)** ++ + + + , (
0
( r r9 c R e Zd Zdedeeee f fdZdededede fdZ
d S )
PatchDependenciesMatcherr1 r2 c h t t }t |d 5 }|D ]q}|d |dd }}|dk rt d t j | D }|j D ]"}||j | #r d d d n # 1 swxY w Y |S )NrP r r rK c d g | ]-}t |d |d |d |d .S )filenamer vulnerability_idvulnerability_type)r r r r r> )r? _s r rA z9PatchDependenciesMatcher._parse_input.. sY
'%&z]!"6$%&8$9&'(<&= r )r' ) r r# rQ r& jsonloadsr' r rR ) r/ r1
patch_depsrT rH rL datapatch_dependencyr` s r r- z%PatchDependenciesMatcher._parse_input s/ 8C47H7H
)S
!
! T
"1gtABBxtC<< #2 "&D!1!1
$
$
$ (8'= O 78??(
( s A5B''B+.B+rb rc rd rX c d}| j |g D ]Ԋ t || }g j D ]}|j |k r| t j ||j |j k rM
t j ||j |j |j |j f d} fdD fdD |S )NFTc
n g | ]1}t |d t t j k i2S )dependencies_met)r
lenr' )r? rowmatches_to_insertrz s r rA z;PatchDependenciesMatcher.match_and_save.. s\ ! ! !
% -..#6F6L2M2MM ! ! !r c D g | ] }j | S r )patch_dependenciesri )r? matchrd s r rA z;PatchDependenciesMatcher.match_and_save.. s:
%55e<<
r )
r. rf r
r' r r_ r[ r\ r^ r rR r r )
r/ rb rc rd rX rj rW r` r rz s
` @@r rk z'PatchDependenciesMatcher.match_and_save s_
$ 8 < < 2!
!
' ' $I}==H !# #3#9
&
&#,
=='11 X/GHH '+, , &,, GLL?3K L L + 0 + 3 + 5 "&J! ! ! ! ! -! ! !
.
r N) r r r r r6 r# r& r- r r rk r r r ro ro s c d3_8M3M.N >00 0
0
( 0 0 0 0 0 0r ro )__doc__r4 rv r[ collectionsr dataclassesr r typingr r rd r r
r utilsr r
r r r& ABCr) r9 ro r r r r s *
# # # # # # ( ( ( ( ( ( ( ( ' ' ' ' ' ' ' ' 6 6 6 6 6 6 6 6 6 6 / / / / / / / /$ $ $ $ $Z $ $ $ 8 8 8 8 8 8 8 8
cg
Z Z Z Z Zg Z Z ZzP P P P Pw P P P P Pr