def test_matches_with_version_end_including(self):
branch_cpe = CPE(self.template % '4.1.*',
version_end_including='4.1.3')
assert branch_cpe.matches(CPE(self.template % '4.1.2'))
assert branch_cpe.matches(CPE(self.template % '4.1.3'))
assert not branch_cpe.matches(CPE(self.template % '4.1.4'))
def test_matches_all(self):
cpe = CPE('cpe:2.3:a:apache:activemq:4.0.1:*:*:*:*:*:*:*')
assert not cpe.matches_all
cpe = CPE('cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*')
assert cpe.matches_all
cpe = CPE(
'cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*',
version_start_including='1',
)
assert not cpe.matches_all
cpe = CPE(
'cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*',
version_start_excluding='1',
)
assert not cpe.matches_all
cpe = CPE(
'cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*',
version_end_including='1',
)
assert not cpe.matches_all
cpe = CPE(
'cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*',
version_end_excluding='1',
)
assert not cpe.matches_all
def test_cpe_operation_with_or_operation(self):
operation = {
'operator':
'OR',
'cpe': [{
'cpe23Uri': 'cpe:2.3:a:apache:activemq:4.1.*:*:*:*:*:*:*:*',
'vulnerable': True,
}, {
'cpe23Uri': 'cpe:2.3:a:apache:activemq:4.2.*:*:*:*:*:*:*:*',
'vulnerable': False,
}]
}
cpeo = CPEOperation(operation)
version_cpe = CPE('cpe:2.3:a:apache:activemq:4.1.1:*:*:*:*:*:*:*')
matching_cpe = cpeo.matches(version_cpe)
assert matching_cpe.is_vulnerable
def test_init(self):
c = CPE('cpe:2.3:a:apache:activemq:4.0.1:*:*:*:*:*:*:*')
assert c.vendor == 'apache'
def test_matches_with_exact_version(self):
version_cpe = CPE('cpe:2.3:a:apache:activemq:4.1.1:*:*:*:*:*:*:*')
assert version_cpe.matches(version_cpe)
def test_matches_with_same_branch(self):
branch_cpe = CPE('cpe:2.3:a:apache:activemq:4.1.*:*:*:*:*:*:*:*')
version_branch_cpe = CPE(
'cpe:2.3:a:apache:activemq:4.1.1:*:*:*:*:*:*:*')
assert branch_cpe.matches(version_branch_cpe)
def test_matches_with_different_branch(self):
branch_cpe = CPE('cpe:2.3:a:apache:activemq:4.1.*:*:*:*:*:*:*:*')
version_cpe = CPE('cpe:2.3:a:apache:activemq:4.0.1:*:*:*:*:*:*:*')
assert not branch_cpe.matches(version_cpe)
def test_matches_with_wildcard_inverse(self):
version_cpe = CPE('cpe:2.3:a:apache:activemq:4.0.1:*:*:*:*:*:*:*')
master_cpe = CPE('cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*')
assert version_cpe.matches(master_cpe)
def test_matches_with_wildcard(self):
master_cpe = CPE('cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*')
version_cpe = CPE('cpe:2.3:a:apache:activemq:4.0.1:*:*:*:*:*:*:*')
assert master_cpe.matches(version_cpe)
def test_init_with_invalid_number_of_values_in_cpe_str(self):
with pytest.raises(ValueError):
CPE('cpe:2.3:a:apache:activemq:4.0.1:*:*:*:*:*')
def test_init_with_invalid_cpe_str(self):
with pytest.raises(AssertionError):
CPE('anystring')