1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-19 03:52:17 +00:00
freebsd-ports/Mk/Scripts/check-vulnerable.sh
Mathieu Arnold 5ba3aba7ff Reverse tests to decrease complexity.
PR:		210198
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6779
2016-06-19 11:25:35 +00:00

37 lines
989 B
Bash

#!/bin/sh
# $FreeBSD$
#
# MAINTAINER: portmgr@FreeBSD.org
set -e
. "${dp_SCRIPTSDIR}/functions.sh"
validate_env dp_ECHO_MSG dp_PKG_BIN dp_PORTNAME dp_PKGNAME
[ -n "${DEBUG_MK_SCRIPTS}" -o -n "${DEBUG_MK_SCRIPTS_CHECK_VULNERABLE}" ] && set -x
set -u
# If the package is pkg, disable these checks, it fails while
# upgrading when pkg is not there.
# FIXME: check is this is still true
if [ "${dp_PORTNAME}" = "pkg" ]; then
exit 0
fi
if [ ! -x "${dp_PKG_BIN}" ]; then
exit 0
fi
vlist=$(${dp_PKG_BIN} audit "${dp_PKGNAME}" || :)
if [ "${vlist}" != "0 problem(s) in the installed packages found." ]; then
${dp_ECHO_MSG} "===> ${dp_PKGNAME} has known vulnerabilities:"
${dp_ECHO_MSG} "$vlist"
${dp_ECHO_MSG} "=> Please update your ports tree and try again."
${dp_ECHO_MSG} "=> Note: Vulnerable ports are marked as such even if there is no update available."
${dp_ECHO_MSG} "=> If you wish to ignore this vulnerability rebuild with 'make DISABLE_VULNERABILITIES=yes'"
exit 1
fi