fosslight-binary 5.1.2__tar.gz → 5.1.4__tar.gz

{fosslight_binary-5.1.2 → fosslight_binary-5.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: fosslight_binary
-Version: 5.1.2
+Version: 5.1.4
 Summary: FOSSLight Binary Scanner
 Home-page: https://github.com/fosslight/fosslight_binary_scanner
 Author: LG Electronics
@@ -25,7 +25,7 @@ Description: <!--
         ## 👏 Contributing Guide
         
         We always welcome your contributions.  
-        Please see the [CONTRIBUTING guide](https://fosslight.org/fosslight-guide-en/learn/1_contribution.html) for how to contribute.
+        Please see the [CONTRIBUTING guide](https://fosslight.org/hub-guide-en/contribution/1_contribution.html) for how to contribute.
         
         
         ## 📄 License

{fosslight_binary-5.1.2 → fosslight_binary-5.1.4}/README.md

@@ -17,7 +17,7 @@ Please see the [**User Guide**](https://fosslight.org/fosslight-guide-en/scanner
 ## 👏 Contributing Guide
 
 We always welcome your contributions.  
-Please see the [CONTRIBUTING guide](https://fosslight.org/fosslight-guide-en/learn/1_contribution.html) for how to contribute.
+Please see the [CONTRIBUTING guide](https://fosslight.org/hub-guide-en/contribution/1_contribution.html) for how to contribute.
 
 
 ## 📄 License

{fosslight_binary-5.1.2 → fosslight_binary-5.1.4}/setup.py

@@ -33,7 +33,7 @@ if __name__ == "__main__":
 
     setup(
         name=_PACKAEG_NAME,
-        version='5.1.2',
+        version='5.1.4',
         package_dir={"": "src"},
         packages=find_packages(where='src'),
         description='FOSSLight Binary Scanner',

{fosslight_binary-5.1.2 → fosslight_binary-5.1.4}/src/fosslight_binary/_binary.py

@@ -3,6 +3,7 @@
 # Copyright (c) 2020 LG Electronics Inc.
 # SPDX-License-Identifier: Apache-2.0
 from fosslight_util.oss_item import FileItem
+import urllib.parse
 
 EXCLUDE_TRUE_VALUE = "Exclude"
 TLSH_CHECKSUM_NULL = "0"
@@ -28,8 +29,9 @@ class BinaryItem(FileItem):
         self.vulnerability_items = []
         self.binary_name_without_path = ""
         self.bin_name_with_path = value
-        self.found_in_owasp = False
         self.is_binary = True
+        self.found_in_owasp = False
+        self.found_in_bin_db = False  # for debugging
 
     def __del__(self):
         pass
@@ -43,8 +45,8 @@ class BinaryItem(FileItem):
         self.oss_items.extend(new_oss_list)
 
     def get_vulnerability_items(self):
-        nvd_url = [vul_item.nvd_url for vul_item in self.vulnerability_items]
-        return ", ".join(nvd_url)
+        nvd_url = [urllib.parse.unquote(vul_item.nvd_url) for vul_item in self.vulnerability_items]
+        return ", ".join(nvd_url).strip()
 
     def get_print_binary_only(self):
         return (self.source_name_or_path + "\t" + self.checksum + "\t" + self.tlsh)

{fosslight_binary-5.1.2 → fosslight_binary-5.1.4}/src/fosslight_binary/_binary_dao.py

@@ -43,11 +43,20 @@ def get_oss_info_from_db(bin_info_list, dburl=""):
                 for idx, row in df_result.iterrows():
                     if not item.found_in_owasp:
                         oss_from_db = OssItem(row['ossname'], row['ossversion'], row['license'])
-                        bin_oss_items.append(oss_from_db)
+
+                        if bin_oss_items:
+                            if not any(oss_item.name == oss_from_db.name
+                                       and oss_item.version == oss_from_db.version
+                                       and oss_item.license == oss_from_db.license
+                                       for oss_item in bin_oss_items):
+                                bin_oss_items.append(oss_from_db)
+                        else:
+                            bin_oss_items.append(oss_from_db)
 
                 if bin_oss_items:
                     item.set_oss_items(bin_oss_items)
                     item.comment = "Binary DB result"
+                    item.found_in_binary = True
 
     disconnect_lge_bin_db()
     return bin_info_list, _cnt_auto_identified

{fosslight_binary-5.1.2 → fosslight_binary-5.1.4}/src/fosslight_binary/binary_analysis.py

@@ -63,6 +63,8 @@ def get_checksum_and_tlsh(bin_with_path):
         checksum_value = str(sha1_hash.hexdigest())
         try:
             tlsh_value = str(tlsh.hash(byte))
+            if tlsh_value == "TNULL" or (not tlsh_value):
+                tlsh_value = TLSH_CHECKSUM_NULL
         except:
             tlsh_value = TLSH_CHECKSUM_NULL
         f.close()

{fosslight_binary-5.1.2 → fosslight_binary-5.1.4}/src/fosslight_binary.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: fosslight-binary
-Version: 5.1.2
+Version: 5.1.4
 Summary: FOSSLight Binary Scanner
 Home-page: https://github.com/fosslight/fosslight_binary_scanner
 Author: LG Electronics
@@ -25,7 +25,7 @@ Description: <!--
         ## 👏 Contributing Guide
         
         We always welcome your contributions.  
-        Please see the [CONTRIBUTING guide](https://fosslight.org/fosslight-guide-en/learn/1_contribution.html) for how to contribute.
+        Please see the [CONTRIBUTING guide](https://fosslight.org/hub-guide-en/contribution/1_contribution.html) for how to contribute.
         
         
         ## 📄 License