snyk 1.1003.0 → 1.1005.0

package/dist/cli/545.index.js

@@ -14527,7 +14527,7 @@ class NeedleWrapperException extends Error {
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.buildUnauthenticatedV2RequestConfig = exports.parseChallengeHeaders = exports.getToken = exports.paginatedV2Call = exports.registryCall = exports.registryV2Call = void 0;
-const parseLink = __webpack_require__(54336);
+const parseLink = __webpack_require__(28490);
 const url = __webpack_require__(78835);
 const needle_1 = __webpack_require__(48360);
 const BEARER_REALM = "Bearer realm";
@@ -14806,86 +14806,6 @@ function isRedirectStatus(statusCode) {
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 //# sourceMappingURL=types.js.map
 
-/***/ }),
-
-/***/ 54336:
-/***/ ((module, __unused_webpack_exports, __webpack_require__) => {
-
-"use strict";
-
-
-var qs = __webpack_require__(71191)
-  , url = __webpack_require__(78835)
-  , xtend = __webpack_require__(47529);
-
-const PARSE_LINK_HEADER_MAXLEN = parseInt(process.env.PARSE_LINK_HEADER_MAXLEN) || 2000;
-const PARSE_LINK_HEADER_THROW_ON_MAXLEN_EXCEEDED = process.env.PARSE_LINK_HEADER_THROW_ON_MAXLEN_EXCEEDED != null
-
-function hasRel(x) {
-  return x && x.rel;
-}
-
-function intoRels (acc, x) {
-  function splitRel (rel) {
-    acc[rel] = xtend(x, { rel: rel });
-  }
-
-  x.rel.split(/\s+/).forEach(splitRel);
-
-  return acc;
-}
-
-function createObjects (acc, p) {
-  // rel="next" => 1: rel 2: next
-  var m = p.match(/\s*(.+)\s*=\s*"?([^"]+)"?/)
-  if (m) acc[m[1]] = m[2];
-  return acc;
-}
-
-function parseLink(link) {
-  try {
-    var m         =  link.match(/<?([^>]*)>(.*)/)
-      , linkUrl   =  m[1]
-      , parts     =  m[2].split(';')
-      , parsedUrl =  url.parse(linkUrl)
-      , qry       =  qs.parse(parsedUrl.query);
-
-    parts.shift();
-
-    var info = parts
-      .reduce(createObjects, {});
-    
-    info = xtend(qry, info);
-    info.url = linkUrl;
-    return info;
-  } catch (e) {
-    return null;
-  }
-}
-
-function checkHeader(linkHeader){
-  if (!linkHeader) return false;
-
-  if (linkHeader.length > PARSE_LINK_HEADER_MAXLEN) {
-    if (PARSE_LINK_HEADER_THROW_ON_MAXLEN_EXCEEDED) {
-      throw new Error('Input string too long, it should be under ' + PARSE_LINK_HEADER_MAXLEN + ' characters.');
-    } else {
-        return false;
-      }
-  }
-  return true;
-}
-
-module.exports = function (linkHeader) {
-  if (!checkHeader(linkHeader)) return null;
-
-  return linkHeader.split(/,\s*</)
-   .map(parseLink)
-   .filter(hasRel)
-   .reduce(intoRels, {});
-};
-
-
 /***/ }),
 
 /***/ 8381:
@@ -147805,6 +147725,86 @@ module.exports = pTry;
 module.exports.default = pTry;
 
 
+/***/ }),
+
+/***/ 28490:
+/***/ ((module, __unused_webpack_exports, __webpack_require__) => {
+
+"use strict";
+
+
+var qs = __webpack_require__(71191)
+  , url = __webpack_require__(78835)
+  , xtend = __webpack_require__(47529);
+
+const PARSE_LINK_HEADER_MAXLEN = parseInt(process.env.PARSE_LINK_HEADER_MAXLEN) || 2000;
+const PARSE_LINK_HEADER_THROW_ON_MAXLEN_EXCEEDED = process.env.PARSE_LINK_HEADER_THROW_ON_MAXLEN_EXCEEDED != null
+
+function hasRel(x) {
+  return x && x.rel;
+}
+
+function intoRels (acc, x) {
+  function splitRel (rel) {
+    acc[rel] = xtend(x, { rel: rel });
+  }
+
+  x.rel.split(/\s+/).forEach(splitRel);
+
+  return acc;
+}
+
+function createObjects (acc, p) {
+  // rel="next" => 1: rel 2: next
+  var m = p.match(/\s*(.+)\s*=\s*"?([^"]+)"?/)
+  if (m) acc[m[1]] = m[2];
+  return acc;
+}
+
+function parseLink(link) {
+  try {
+    var m         =  link.match(/<?([^>]*)>(.*)/)
+      , linkUrl   =  m[1]
+      , parts     =  m[2].split(';')
+      , parsedUrl =  url.parse(linkUrl)
+      , qry       =  qs.parse(parsedUrl.query);
+
+    parts.shift();
+
+    var info = parts
+      .reduce(createObjects, {});
+    
+    info = xtend(qry, info);
+    info.url = linkUrl;
+    return info;
+  } catch (e) {
+    return null;
+  }
+}
+
+function checkHeader(linkHeader){
+  if (!linkHeader) return false;
+
+  if (linkHeader.length > PARSE_LINK_HEADER_MAXLEN) {
+    if (PARSE_LINK_HEADER_THROW_ON_MAXLEN_EXCEEDED) {
+      throw new Error('Input string too long, it should be under ' + PARSE_LINK_HEADER_MAXLEN + ' characters.');
+    } else {
+        return false;
+      }
+  }
+  return true;
+}
+
+module.exports = function (linkHeader) {
+  if (!checkHeader(linkHeader)) return null;
+
+  return linkHeader.split(/,\s*</)
+   .map(parseLink)
+   .filter(hasRel)
+   .reduce(intoRels, {});
+};
+
+
 /***/ }),
 
 /***/ 29847:
@@ -159273,8 +159273,13 @@ class GoBinary {
     constructor(goElfBinary) {
         [this.name, this.modules] = extractModuleInformation(goElfBinary);
         const pclnTab = goElfBinary.body.sections.find((section) => section.name === ".gopclntab");
+        // some CGo built binaries might not contain a pclnTab, which means we
+        // cannot scan the files.
+        // TODO: from a technical perspective, it would be enough to only report the
+        // modules, as the only remediation path is to upgrade a full module
+        // anyways. From a product perspective, it's not clear (yet).
         if (pclnTab === undefined) {
-            throw Error("no pcln table found in Go binary");
+            throw Error("no pcln table present in Go binary");
         }
         this.matchFilesToModules(new pclntab_1.LineTable(pclnTab.data).go12MapFiles());
     }
@@ -159626,10 +159631,12 @@ exports.GoModule = GoModule;
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.goModulesToScannedProjects = exports.getGoModulesContentAction = exports.DEP_GRAPH_TYPE = void 0;
+const Debug = __webpack_require__(15158);
 const elf = __webpack_require__(18);
 const event_loop_spinner_1 = __webpack_require__(77158);
 const path = __webpack_require__(85622);
 const go_binary_1 = __webpack_require__(6803);
+const debug = Debug("snyk");
 const ignoredPaths = [
     path.normalize("/boot"),
     path.normalize("/dev"),
@@ -159743,21 +159750,26 @@ async function goModulesToScannedProjects(filePathToContent) {
         if (event_loop_spinner_1.eventLoopSpinner.isStarving()) {
             await event_loop_spinner_1.eventLoopSpinner.spin();
         }
-        const depGraph = await new go_binary_1.GoBinary(goBinary).depGraph();
-        if (!depGraph) {
-            continue;
+        try {
+            const depGraph = await new go_binary_1.GoBinary(goBinary).depGraph();
+            if (!depGraph) {
+                continue;
+            }
+            const depGraphFact = {
+                type: "depGraph",
+                data: depGraph,
+            };
+            scanResults.push({
+                facts: [depGraphFact],
+                identity: {
+                    type: exports.DEP_GRAPH_TYPE,
+                    targetFile: filePath,
+                },
+            });
+        }
+        catch (err) {
+            debug(`Go binary scan for file ${filePath} failed: ${err}`);
         }
-        const depGraphFact = {
-            type: "depGraph",
-            data: depGraph,
-        };
-        scanResults.push({
-            facts: [depGraphFact],
-            identity: {
-                type: exports.DEP_GRAPH_TYPE,
-                targetFile: filePath,
-            },
-        });
     }
     return scanResults;
 }