Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/vulndb: "no metadata for C" when computing derived symbols #53583

Open
neild opened this issue Jun 28, 2022 · 1 comment
Open

x/vulndb: "no metadata for C" when computing derived symbols #53583

neild opened this issue Jun 28, 2022 · 1 comment
Labels
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo

Comments

@neild
Copy link
Contributor

neild commented Jun 28, 2022

$ go run ./cmd/vulnreport fix reports/GO-2022-0417.yaml
2022/06/28 10:03:00 fix("reports/GO-2022-0417.yaml"): addExportedSymbols("github.com/containers/buildah", ""): packages.Load:
could not import C (no metadata for C)
invalid operation: cannot compare d.dh == nil (operator == not defined on untyped nil)
invalid operation: cannot compare c.ctx == nil (operator == not defined on untyped nil)
invalid operation: cannot compare key.k == nil (operator == not defined on untyped nil)
exit status 1

This is a report for the package "github.com/containers/buildah"; from the error, it looks like we have a problem with analyzing packages with a transitive C dependency.

See also #36547.

@gopherbot gopherbot added this to the Unreleased milestone Jun 28, 2022
@dr2chase
Copy link
Contributor

dr2chase commented Jul 1, 2022

@golang/vulndb, PTAL, TYVM.

@dr2chase dr2chase added the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label Jul 1, 2022
@julieqiu julieqiu added the vulncheck or vulndb Issues for the x/vuln or x/vulndb repo label Sep 8, 2022
@julieqiu julieqiu modified the milestones: Unreleased, vuln/unplanned Sep 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Projects
Status: No status
Development

No branches or pull requests

4 participants