fix(uC/lib): handling of product names with special characters #4959
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description-
Fixes #4417
In this issue cve-bin tool was deleting the triage data for micrium uC/Lib, it showed unexplored in the html & csv reports (which was not expected)
This was occurring because of the way URNs were parsed in cve-bin tool for the product names (specially for special characters like "/")
for ex -
urn:cbt:1/micrium#uc/lib:1.38.01
- the slash in "uc/lib" was causing the issue.Solution -
HTML ID Normalization
- Added a normalize_id() function which safely converts product names with special characters into valid HTML IDsSteps to reproduce the issue From comments
cve-bin-tool -i test_SBOM.csv --vex-file test_cve-bin-tool_triageFile.json -f csv,html --vex-output triage0919a.json
Python version - Python 3.11.0rc1
OS - Windows 10 (WSL)
Output after the fix - Output csv file
Html reports screenshots -