tree 586155aecff4eefbbc1acd4f1392e4f90d444941
parent 79cd87713b62269ec5e9fe6724554261383cae86
author Zvonimir Pavlinovic <zpavlinovic@google.com> 1639015230 -0800
committer Zvonimir Pavlinovic <zpavlinovic@google.com> 1639509049 +0000

vulncheck: fix support for packages whose every symbol is vulnerable

Some vulnerabilities have an empty slice for the osv.Entry Symbols
field, meaning every symbol is vulnerable. This CL adds support for such
vulnerabilities by doing the following, when an import of the
corresponding packages is seen, we list every top-level method and
function of that package and add it as a Vuln in vulncheck.Result.

Change-Id: I0edac51f7e3923ecfd3f203db80e6f7d22272dd2
Reviewed-on: https://go-review.googlesource.com/c/exp/+/371254
Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com>
Reviewed-by: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Trust: Zvonimir Pavlinovic <zpavlinovic@google.com>