1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
|
from __future__ import annotations
from pathlib import Path
from typing import Any
import pytest
import tests.data.cc.analysis.auxillary_datasets
from sec_certs import constants
from sec_certs.dataset import CPEDataset
from sec_certs.sample import CPE
from sec_certs.serialization.json import SerializationError
@pytest.fixture(scope="module")
def cpe_dset_path() -> Path:
return Path(tests.data.cc.analysis.auxillary_datasets.__path__[0]) / "cpe_dataset.json"
@pytest.fixture(scope="module")
def cpe_dset(cpe_dset_path: Path) -> CPEDataset:
return CPEDataset.from_json(cpe_dset_path)
@pytest.fixture(scope="module")
def cpe_dict() -> dict[str, Any]:
return {
"uri": "cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*",
"title": None,
"start_version": None,
"end_version": None,
}
@pytest.mark.slow
@pytest.mark.monitor_test
@pytest.mark.xfail(reason="May fail due to errors with NIST server.")
@pytest.mark.skip(reason="Too much memory consumed.")
def test_cpe_dset_from_web(tmp_path: Path):
dset = CPEDataset.from_web(tmp_path)
assert dset is not None
assert "cpe:2.3:o:infineon:trusted_platform_firmware:6.40:*:*:*:*:*:*:*" in dset.cpes
def test_cpe_dset_from_json(cpe_dset_path: Path, cpe_dset: CPEDataset):
assert CPEDataset.from_json(cpe_dset_path) == cpe_dset
def test_cpe_dset_vendor_lookup_dict(cpe_dset: CPEDataset):
assert cpe_dset.vendors == {"ibm", "tracker-software", "semperplugins"}
def test_cpe_dset_vendor_to_version_lookup_dict(cpe_dset: CPEDataset):
assert cpe_dset.vendor_to_versions == {
"ibm": {"8.2.2", "2.6.0.1"},
"semperplugins": {"1.3.6.4"},
"tracker-software": {"6.0.320.0"},
}
def test_cpe_dset_vendor_version_to_cpe_lookup_dict(cpe_dset: CPEDataset):
assert cpe_dset.vendor_version_to_cpe == {
("ibm", "8.2.2"): {
CPE(
"cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2.2:*:*:*:*:*:*:*",
"IBM Security Access Manager For Enterprise Single Sign-On 8.2.2",
)
},
("ibm", "2.6.0.1"): {
CPE(
"cpe:2.3:a:ibm:security_key_lifecycle_manager:2.6.0.1:*:*:*:*:*:*:*",
"IBM Security Key Lifecycle Manager 2.6.0.1",
)
},
("semperplugins", "1.3.6.4"): {
CPE(
"cpe:2.3:a:semperplugins:all_in_one_seo_pack:1.3.6.4:*:*:*:*:wordpress:*:*",
"Semper Plugins All in One SEO Pack 1.3.6.4 for WordPress",
)
},
("tracker-software", "6.0.320.0"): {
CPE(
"cpe:2.3:a:tracker-software:pdf-xchange_lite_printer:6.0.320.0:*:*:*:*:*:*:*",
"Tracker Software PDF-XChange Lite Printer 6.0.320.0",
)
},
}
def test_cpe_parsing():
potentially_problematic_cpes = {
'cpe:2.3:a:bayashi:dopvstar\\::0091:*:*:*:*:*:*:*"': ("bayashi", "dopvstar:", "0091"),
"cpe:2.3:a:moundlabs:\\:\\:mound\\:\\::2.1.6:*:*:*:*:*:*:*": ("moundlabs", "::mound::", "2.1.6"),
"cpe:2.3:a:lemonldap-ng:lemonldap\\:\\::*:*:*:*:*:*:*:*": (
"lemonldap-ng",
"lemonldap::",
constants.CPE_VERSION_NA,
),
"cpe:2.3:o:cisco:nx-os:5.0\\\\\\(3\\\\\\)u5\\\\\\(1g\\\\\\):*:*:*:*:*:*:*": (
"cisco",
"nx-os",
"5.0\\(3\\)u5\\(1g\\)",
),
"cpe:2.3:a:\\@thi.ng\\/egf_project:\\@thi.ng\\/egf:-:*:*:*:*:node.js:*:*": (
"@thi.ng/egf project",
"@thi.ng/egf",
"-",
),
"cpe:2.3:a:oracle:communications_diameter_signaling_router_idih\\:::*:*:*:*:*:*:*": (
"oracle",
"communications diameter signaling router idih:",
constants.CPE_VERSION_NA,
),
}
for uri, tpl in potentially_problematic_cpes.items():
cpe = CPE(uri)
assert cpe.vendor == tpl[0]
assert cpe.item_name == tpl[1]
assert cpe.version == tpl[2]
def test_cpe_from_to_dict(cpe_dict):
cpe = CPE.from_dict(cpe_dict)
ret = cpe.to_dict()
assert cpe_dict == ret
other_cpe = CPE.from_dict(ret)
assert cpe == other_cpe
def test_to_pandas(cpe_dset: CPEDataset):
df = cpe_dset.to_pandas()
assert df.shape == (len(cpe_dset), len(CPE.pandas_columns) - 1)
assert df.index.name == "uri"
assert set(df.columns) == set(CPE.pandas_columns) - {"uri"}
def test_serialization_missing_path():
dummy_dset = CPEDataset(False, dict())
with pytest.raises(SerializationError):
dummy_dset.to_json()
|
