tree 65fe9fd512877a4f56bb40d729e404ff61e7e1c6
parent a1842148f3c1fc6a3346188c8ccdb6ee3f576869
author Zvonimir Pavlinovic <zpavlinovic@google.com> 1639015230 -0800
committer Julie Qiu <julie@golang.org> 1648062977 +0000

vulncheck: fix support for packages whose every symbol is vulnerable

Some vulnerabilities have an empty slice for the osv.Entry Symbols
field, meaning every symbol is vulnerable. This CL adds support for such
vulnerabilities by doing the following, when an import of the
corresponding packages is seen, we list every top-level method and
function of that package and add it as a Vuln in vulncheck.Result.

Cherry-picked: https://go-review.googlesource.com/c/exp/+/371254

Change-Id: Ie32a8c192643f017460c996a5534e92bc49a6a2a
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/395049
Trust: Julie Qiu <julie@golang.org>
Run-TryBot: Julie Qiu <julie@golang.org>
Reviewed-by: Jonathan Amsterdam <jba@google.com>