diff options
author | Ludovic Courtès <ludo@gnu.org> | 2016-01-06 15:53:20 +0100 |
---|---|---|
committer | Ludovic Courtès <ludo@gnu.org> | 2016-01-06 15:54:12 +0100 |
commit | f888c0b1207a92b0d7af4dcf7fb73cecd1f0b34f (patch) | |
tree | b5e59aa5778c13b3efe5f78d2d1bca7da5b312c2 | |
parent | 7b78f359d1586ce4e5b00b3008ad8362a8173720 (diff) | |
download | guix-f888c0b1207a92b0d7af4dcf7fb73cecd1f0b34f.tar.gz |
lint: cve: Catch host name lookup errors.
* guix/scripts/lint.scm (package-vulnerabilities): Catch 'getaddrinfo-error'.
-rw-r--r-- | guix/scripts/lint.scm | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/guix/scripts/lint.scm b/guix/scripts/lint.scm index f296f8a00e..e2cc965951 100644 --- a/guix/scripts/lint.scm +++ b/guix/scripts/lint.scm @@ -1,7 +1,7 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2014 Cyril Roelandt <tipecaml@gmail.com> ;;; Copyright © 2014, 2015 Eric Bavier <bavier@member.fsf.org> -;;; Copyright © 2013, 2014, 2015 Ludovic Courtès <ludo@gnu.org> +;;; Copyright © 2013, 2014, 2015, 2016 Ludovic Courtès <ludo@gnu.org> ;;; Copyright © 2015 Mathieu Lirzin <mthl@openmailbox.org> ;;; ;;; This file is part of GNU Guix. @@ -593,7 +593,16 @@ Common Platform Enumeration (CPE) name." (define package-vulnerabilities (let ((lookup (delay (vulnerabilities->lookup-proc - (current-vulnerabilities))))) + ;; Catch networking errors to allow network-less + ;; operation. + (catch 'getaddrinfo-error + (lambda () + (current-vulnerabilities)) + (lambda (key errcode) + (warn (_ "failed to lookup NIST host: ~a~%") + (gai-strerror errcode)) + (warn (_ "assuming no CVE vulnerabilities~%")) + '())))))) (lambda (package) "Return a list of vulnerabilities affecting PACKAGE." ((force lookup) |