aboutsummaryrefslogtreecommitdiff
path: root/guix
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2016-01-06 15:53:20 +0100
committerLudovic Courtès <ludo@gnu.org>2016-01-06 15:54:12 +0100
commitf888c0b1207a92b0d7af4dcf7fb73cecd1f0b34f (patch)
treeb5e59aa5778c13b3efe5f78d2d1bca7da5b312c2 /guix
parent7b78f359d1586ce4e5b00b3008ad8362a8173720 (diff)
downloadgnu-guix-f888c0b1207a92b0d7af4dcf7fb73cecd1f0b34f.tar
gnu-guix-f888c0b1207a92b0d7af4dcf7fb73cecd1f0b34f.tar.gz
lint: cve: Catch host name lookup errors.
* guix/scripts/lint.scm (package-vulnerabilities): Catch 'getaddrinfo-error'.
Diffstat (limited to 'guix')
-rw-r--r--guix/scripts/lint.scm13
1 files changed, 11 insertions, 2 deletions
diff --git a/guix/scripts/lint.scm b/guix/scripts/lint.scm
index f296f8a00e..e2cc965951 100644
--- a/guix/scripts/lint.scm
+++ b/guix/scripts/lint.scm
@@ -1,7 +1,7 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2014 Cyril Roelandt <tipecaml@gmail.com>
;;; Copyright © 2014, 2015 Eric Bavier <bavier@member.fsf.org>
-;;; Copyright © 2013, 2014, 2015 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2013, 2014, 2015, 2016 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2015 Mathieu Lirzin <mthl@openmailbox.org>
;;;
;;; This file is part of GNU Guix.
@@ -593,7 +593,16 @@ Common Platform Enumeration (CPE) name."
(define package-vulnerabilities
(let ((lookup (delay (vulnerabilities->lookup-proc
- (current-vulnerabilities)))))
+ ;; Catch networking errors to allow network-less
+ ;; operation.
+ (catch 'getaddrinfo-error
+ (lambda ()
+ (current-vulnerabilities))
+ (lambda (key errcode)
+ (warn (_ "failed to lookup NIST host: ~a~%")
+ (gai-strerror errcode))
+ (warn (_ "assuming no CVE vulnerabilities~%"))
+ '()))))))
(lambda (package)
"Return a list of vulnerabilities affecting PACKAGE."
((force lookup)