[Secure-testing-commits] r10628 - bin

[fw at alioth.debian.org]

Author: fw
Date: 2008-12-05 19:10:23 +0000 (Fri, 05 Dec 2008)
New Revision: 10628

Added:
   bin/show-debsecan
Log:
bin/show-debsecan: new script to debug debsecan data

Added: bin/show-debsecan
===================================================================
--- bin/show-debsecan	                        (rev 0)
+++ bin/show-debsecan	2008-12-05 19:10:23 UTC (rev 10628)
@@ -0,0 +1,55 @@
+#!/usr/bin/python
+
+import sys
+import apsw
+import base64
+import zlib
+from cStringIO import StringIO
+
+if len(sys.argv) not in (2, 3):
+    print "usage: show-debsecan DATABASE-PATH [BLOB-NAME]"
+    sys.exit(1)
+
+db = apsw.Connection(sys.argv[1])
+c = db.cursor()
+
+if len(sys.argv) == 2:
+    for (name,) in c.execute("SELECT name FROM debsecan_data ORDER BY name"):
+        print name
+else: # len(sys.argv) == 3
+    name = sys.argv[2]
+    for (data,) in c.execute("SELECT data FROM debsecan_data WHERE name = ?",
+                             (name,)):
+        pass
+    data = base64.b64decode(data)
+    data = zlib.decompress(data)
+
+    # The following has been taken from a debsecan test case.
+    data = StringIO(data)
+
+    if data.readline() <> "VERSION 1\n":
+        sys.stderr.write("error: server sends data in unknown format\n")
+        sys.exit(1)
+
+    vuln_names = []
+    for line in data:
+        if line[-1:] == '\n':
+            line = line[:-1]
+        if line == '':
+            break
+        (name, flags, desc) = line.split(',', 2)
+        vuln_names.append(name)
+
+    for line in data:
+        if line[-1:] == '\n':
+            line = line[:-1]
+        if line == '':
+            break
+        (package, vuln, rest) = line.split(',', 2)
+        vuln = vuln_names[int(vuln)]
+        print "%s,%s,%s" % (package, vuln, rest)
+
+    for line in data:
+        print line,
+
+db.close()