reports: add exported symbols
Add exported symbols to the remainder of the reports.
This is the last CL for now to add exported symbols. Not every report
was successfully processed. For some, "go get" failed at some point,
either for the main module or a dependent, even starting from an empty
go.mod file.
We also skipped reports implicating the standard library, since those
could not be handled by the same technique and would have required
downloading and (probably) building old versions of Go. All the stdlib
vulns are for no-longer-supported Go versions (1.15 or older).
Change-Id: Icf3ec69befa0d03b5c8ec34d920361db6b8fc8ce
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/382154
Trust: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Julie Qiu <julie@golang.org>
diff --git a/reports/GO-2021-0070.yaml b/reports/GO-2021-0070.yaml
index aaece4b..1557ac2 100644
--- a/reports/GO-2021-0070.yaml
+++ b/reports/GO-2021-0070.yaml
@@ -11,6 +11,8 @@
- CVE-2016-3697
symbols:
- GetExecUser
+derived_symbols:
+ - GetExecUserPath
links:
pr: https://github.com/opencontainers/runc/pull/708
commit: https://github.com/opencontainers/runc/commit/69af385de62ea68e2e608335cffbb0f4aa3db091
diff --git a/reports/GO-2021-0072.yaml b/reports/GO-2021-0072.yaml
index 2720a2e..d9e3b87 100644
--- a/reports/GO-2021-0072.yaml
+++ b/reports/GO-2021-0072.yaml
@@ -5,6 +5,17 @@
package: github.com/docker/distribution/registry/storage
symbols:
- blobStore.Get
+ derived_symbols:
+ - PurgeUploads
+ - Walk
+ - blobStore.Enumerate
+ - blobStore.Get
+ - linkedBlobStore.Enumerate
+ - linkedBlobStore.Get
+ - manifestStore.Enumerate
+ - manifestStore.Get
+ - registry.Enumerate
+ - registry.Repositories
versions:
- fixed: v2.7.0-rc.0+incompatible
versions:
@@ -17,6 +28,11 @@
- CVE-2017-11468
symbols:
- copyFullPayload
+derived_symbols:
+ - blobUploadHandler.PatchBlobData
+ - blobUploadHandler.PutBlobUploadComplete
+ - imageManifestHandler.GetImageManifest
+ - imageManifestHandler.PutImageManifest
links:
pr: https://github.com/distribution/distribution/pull/2340
commit: https://github.com/distribution/distribution/commit/91c507a39abfce14b5c8541cf284330e22208c0f
diff --git a/reports/GO-2021-0090.yaml b/reports/GO-2021-0090.yaml
index eaf75ef..f1f2bbb 100644
--- a/reports/GO-2021-0090.yaml
+++ b/reports/GO-2021-0090.yaml
@@ -12,6 +12,8 @@
credit: Neeraj Murarka
symbols:
- VoteSet.MakeCommit
+derived_symbols:
+ - MakeCommit
links:
pr: https://github.com/tendermint/tendermint/pull/5426
commit: https://github.com/tendermint/tendermint/commit/480b995a31727593f58b361af979054d17d84340
diff --git a/reports/GO-2021-0092.yaml b/reports/GO-2021-0092.yaml
index 08dea9e..589c23e 100644
--- a/reports/GO-2021-0092.yaml
+++ b/reports/GO-2021-0092.yaml
@@ -8,6 +8,9 @@
- CVE-2020-15222
symbols:
- Fosite.AuthenticateClient
+derived_symbols:
+ - Fosite.NewAccessRequest
+ - Fosite.NewRevocationRequest
links:
commit: https://github.com/ory/fosite/commit/0c9e0f6d654913ad57c507dd9a36631e1858a3e9
context:
diff --git a/reports/GO-2021-0099.yaml b/reports/GO-2021-0099.yaml
index 2a2a58c..77fb4f0 100644
--- a/reports/GO-2021-0099.yaml
+++ b/reports/GO-2021-0099.yaml
@@ -11,6 +11,8 @@
credit: Chris Smowton
symbols:
- extractTarDirectory
+derived_symbols:
+ - fileWriter.Commit
links:
commit: https://github.com/deislabs/oras/commit/96cd90423303f1bb42bd043cb4c36085e6e91e8e
context:
diff --git a/reports/GO-2021-0100.yaml b/reports/GO-2021-0100.yaml
index fbdb8aa..4bec13f 100644
--- a/reports/GO-2021-0100.yaml
+++ b/reports/GO-2021-0100.yaml
@@ -12,6 +12,20 @@
credit: Aviv Sasson (Palo Alto Networks)
symbols:
- cmdStream
+derived_symbols:
+ - ApplyLayer
+ - ApplyUncompressedLayer
+ - Archiver.CopyFileWithTar
+ - Archiver.CopyWithTar
+ - Archiver.TarUntar
+ - Archiver.UntarPath
+ - CopyResource
+ - CopyTo
+ - DecompressStream
+ - IsArchivePath
+ - Untar
+ - UntarPath
+ - UntarUncompressed
links:
pr: https://github.com/containers/storage/pull/860
commit: https://github.com/containers/storage/commit/306fcabc964470e4b3b87a43a8f6b7d698209ee1
diff --git a/reports/GO-2021-0101.yaml b/reports/GO-2021-0101.yaml
index 76ee7f3..def63da 100644
--- a/reports/GO-2021-0101.yaml
+++ b/reports/GO-2021-0101.yaml
@@ -11,6 +11,53 @@
- CVE-2019-0210
symbols:
- TSimpleJSONProtocol.safePeekContains
+derived_symbols:
+ - Skip
+ - SkipDefaultDepth
+ - TJSONProtocol.ParseElemListBegin
+ - TJSONProtocol.ReadBool
+ - TJSONProtocol.ReadByte
+ - TJSONProtocol.ReadDouble
+ - TJSONProtocol.ReadFieldBegin
+ - TJSONProtocol.ReadFieldEnd
+ - TJSONProtocol.ReadI16
+ - TJSONProtocol.ReadI32
+ - TJSONProtocol.ReadI64
+ - TJSONProtocol.ReadListBegin
+ - TJSONProtocol.ReadListEnd
+ - TJSONProtocol.ReadMapBegin
+ - TJSONProtocol.ReadMapEnd
+ - TJSONProtocol.ReadMessageBegin
+ - TJSONProtocol.ReadMessageEnd
+ - TJSONProtocol.ReadSetBegin
+ - TJSONProtocol.ReadSetEnd
+ - TJSONProtocol.ReadStructBegin
+ - TJSONProtocol.ReadStructEnd
+ - TSimpleJSONProtocol.ParseElemListBegin
+ - TSimpleJSONProtocol.ParseF64
+ - TSimpleJSONProtocol.ParseI64
+ - TSimpleJSONProtocol.ParseListBegin
+ - TSimpleJSONProtocol.ParseListEnd
+ - TSimpleJSONProtocol.ParseObjectEnd
+ - TSimpleJSONProtocol.ParseObjectStart
+ - TSimpleJSONProtocol.ReadByte
+ - TSimpleJSONProtocol.ReadDouble
+ - TSimpleJSONProtocol.ReadI16
+ - TSimpleJSONProtocol.ReadI32
+ - TSimpleJSONProtocol.ReadI64
+ - TSimpleJSONProtocol.ReadListBegin
+ - TSimpleJSONProtocol.ReadListEnd
+ - TSimpleJSONProtocol.ReadMapBegin
+ - TSimpleJSONProtocol.ReadMapEnd
+ - TSimpleJSONProtocol.ReadMessageBegin
+ - TSimpleJSONProtocol.ReadMessageEnd
+ - TSimpleJSONProtocol.ReadSetBegin
+ - TSimpleJSONProtocol.ReadSetEnd
+ - TSimpleJSONProtocol.ReadStructBegin
+ - TSimpleJSONProtocol.ReadStructEnd
+ - TStandardClient.Call
+ - TStandardClient.Recv
+ - tApplicationException.Read
links:
commit: https://github.com/apache/thrift/commit/264a3f318ed3e9e51573f67f963c8509786bcec2
context:
diff --git a/reports/GO-2021-0103.yaml b/reports/GO-2021-0103.yaml
index 1a7252c..d83c906 100644
--- a/reports/GO-2021-0103.yaml
+++ b/reports/GO-2021-0103.yaml
@@ -11,6 +11,13 @@
credit: Dima Stebaev
symbols:
- udivrem
+derived_symbols:
+ - Int.AddMod
+ - Int.Div
+ - Int.Mod
+ - Int.MulMod
+ - Int.SDiv
+ - Int.SMod
links:
pr: https://github.com/holiman/uint256/pull/80
commit: https://github.com/holiman/uint256/commit/6785da6e3eea403260a5760029e722aa4ff1716d
diff --git a/reports/GO-2021-0104.yaml b/reports/GO-2021-0104.yaml
index f416ae5..7cae97c 100644
--- a/reports/GO-2021-0104.yaml
+++ b/reports/GO-2021-0104.yaml
@@ -11,6 +11,15 @@
credit: Gaukas Wang (@Gaukas)
symbols:
- DTLSTransport.Start
+derived_symbols:
+ - PeerConnection.AddTrack
+ - PeerConnection.AddTransceiverFromTrack
+ - PeerConnection.CreateDataChannel
+ - PeerConnection.RemoveTrack
+ - PeerConnection.SetLocalDescription
+ - PeerConnection.SetRemoteDescription
+ - operations.Done
+ - operations.Enqueue
links:
pr: https://github.com/pion/webrtc/pull/1709
commit: https://github.com/pion/webrtc/commit/545613dcdeb5dedb01cce94175f40bcbe045df2e
diff --git a/reports/GO-2021-0107.yaml b/reports/GO-2021-0107.yaml
index 931c466..d07d175 100644
--- a/reports/GO-2021-0107.yaml
+++ b/reports/GO-2021-0107.yaml
@@ -7,6 +7,8 @@
authentication bypass.
symbols:
- Server.socketHandler
+derived_symbols:
+ - Server.Socket
links:
commit: https://github.com/ecnepsnai/web/commit/5a78f8d5c41ce60dcf9f61aaf47a7a8dc3e0002f
context:
diff --git a/reports/GO-2021-0110.yaml b/reports/GO-2021-0110.yaml
index 08dea9e..589c23e 100644
--- a/reports/GO-2021-0110.yaml
+++ b/reports/GO-2021-0110.yaml
@@ -8,6 +8,9 @@
- CVE-2020-15222
symbols:
- Fosite.AuthenticateClient
+derived_symbols:
+ - Fosite.NewAccessRequest
+ - Fosite.NewRevocationRequest
links:
commit: https://github.com/ory/fosite/commit/0c9e0f6d654913ad57c507dd9a36631e1858a3e9
context:
diff --git a/reports/GO-2021-0111.yaml b/reports/GO-2021-0111.yaml
index 93b908d..42e1e9e 100644
--- a/reports/GO-2021-0111.yaml
+++ b/reports/GO-2021-0111.yaml
@@ -10,6 +10,43 @@
- CVE-2021-20329
symbols:
- valueWriter.writeElementHeader
+derived_symbols:
+ - Copier.AppendArrayBytes
+ - Copier.AppendDocumentBytes
+ - Copier.AppendValueBytes
+ - Copier.CopyArrayFromBytes
+ - Copier.CopyBytesToArrayWriter
+ - Copier.CopyBytesToDocumentWriter
+ - Copier.CopyDocument
+ - Copier.CopyDocumentFromBytes
+ - Copier.CopyDocumentToBytes
+ - Copier.CopyValue
+ - Copier.CopyValueFromBytes
+ - Copier.CopyValueToBytes
+ - CopyDocument
+ - valueWriter.WriteArray
+ - valueWriter.WriteBinary
+ - valueWriter.WriteBinaryWithSubtype
+ - valueWriter.WriteBoolean
+ - valueWriter.WriteCodeWithScope
+ - valueWriter.WriteDBPointer
+ - valueWriter.WriteDateTime
+ - valueWriter.WriteDecimal128
+ - valueWriter.WriteDocument
+ - valueWriter.WriteDouble
+ - valueWriter.WriteInt32
+ - valueWriter.WriteInt64
+ - valueWriter.WriteJavascript
+ - valueWriter.WriteMaxKey
+ - valueWriter.WriteMinKey
+ - valueWriter.WriteNull
+ - valueWriter.WriteObjectID
+ - valueWriter.WriteRegex
+ - valueWriter.WriteString
+ - valueWriter.WriteSymbol
+ - valueWriter.WriteTimestamp
+ - valueWriter.WriteUndefined
+ - valueWriter.WriteValueBytes
links:
pr: https://github.com/mongodb/mongo-go-driver/pull/622
commit: https://github.com/mongodb/mongo-go-driver/commit/2aca31d5986a9e1c65a92264736de9fdc3b9b4ca
diff --git a/reports/GO-2021-0112.yaml b/reports/GO-2021-0112.yaml
index 7d71db9..f899645 100644
--- a/reports/GO-2021-0112.yaml
+++ b/reports/GO-2021-0112.yaml
@@ -11,6 +11,81 @@
symbols:
- AppendHeader
- AppendRegex
+derived_symbols:
+ - AppendArrayElement
+ - AppendArrayElementStart
+ - AppendBinaryElement
+ - AppendBooleanElement
+ - AppendCodeWithScopeElement
+ - AppendDBPointerElement
+ - AppendDateTimeElement
+ - AppendDecimal128Element
+ - AppendDocumentElement
+ - AppendDocumentElementStart
+ - AppendDoubleElement
+ - AppendInt32Element
+ - AppendInt64Element
+ - AppendJavaScriptElement
+ - AppendMaxKeyElement
+ - AppendMinKeyElement
+ - AppendNullElement
+ - AppendObjectIDElement
+ - AppendRegexElement
+ - AppendStringElement
+ - AppendSymbolElement
+ - AppendTimeElement
+ - AppendTimestampElement
+ - AppendUndefinedElement
+ - AppendValueElement
+ - ArrayBuilder.AppendArray
+ - ArrayBuilder.AppendBinary
+ - ArrayBuilder.AppendBoolean
+ - ArrayBuilder.AppendCodeWithScope
+ - ArrayBuilder.AppendDBPointer
+ - ArrayBuilder.AppendDateTime
+ - ArrayBuilder.AppendDecimal128
+ - ArrayBuilder.AppendDocument
+ - ArrayBuilder.AppendDouble
+ - ArrayBuilder.AppendInt32
+ - ArrayBuilder.AppendInt64
+ - ArrayBuilder.AppendJavaScript
+ - ArrayBuilder.AppendMaxKey
+ - ArrayBuilder.AppendMinKey
+ - ArrayBuilder.AppendNull
+ - ArrayBuilder.AppendObjectID
+ - ArrayBuilder.AppendRegex
+ - ArrayBuilder.AppendString
+ - ArrayBuilder.AppendSymbol
+ - ArrayBuilder.AppendTimestamp
+ - ArrayBuilder.AppendUndefined
+ - ArrayBuilder.AppendValue
+ - ArrayBuilder.StartArray
+ - BuildArray
+ - BuildArrayElement
+ - BuildDocumentElement
+ - DocumentBuilder.AppendArray
+ - DocumentBuilder.AppendBinary
+ - DocumentBuilder.AppendBoolean
+ - DocumentBuilder.AppendCodeWithScope
+ - DocumentBuilder.AppendDBPointer
+ - DocumentBuilder.AppendDateTime
+ - DocumentBuilder.AppendDecimal128
+ - DocumentBuilder.AppendDocument
+ - DocumentBuilder.AppendDouble
+ - DocumentBuilder.AppendInt32
+ - DocumentBuilder.AppendInt64
+ - DocumentBuilder.AppendJavaScript
+ - DocumentBuilder.AppendMaxKey
+ - DocumentBuilder.AppendMinKey
+ - DocumentBuilder.AppendNull
+ - DocumentBuilder.AppendObjectID
+ - DocumentBuilder.AppendRegex
+ - DocumentBuilder.AppendString
+ - DocumentBuilder.AppendSymbol
+ - DocumentBuilder.AppendTimestamp
+ - DocumentBuilder.AppendUndefined
+ - DocumentBuilder.AppendValue
+ - DocumentBuilder.StartDocument
links:
pr: https://github.com/mongodb/mongo-go-driver/pull/622
commit: https://github.com/mongodb/mongo-go-driver/commit/2aca31d5986a9e1c65a92264736de9fdc3b9b4ca
diff --git a/reports/GO-2021-0113.yaml b/reports/GO-2021-0113.yaml
index e2b4635..7e20a7b 100644
--- a/reports/GO-2021-0113.yaml
+++ b/reports/GO-2021-0113.yaml
@@ -11,6 +11,10 @@
credit: Guido Vranken
symbols:
- Parse
+derived_symbols:
+ - MatchStrings
+ - MustParse
+ - ParseAcceptLanguage
links:
pr: https://go-review.googlesource.com/c/text/+/340830
commit: https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f
diff --git a/reports/GO-2021-0228.yaml b/reports/GO-2021-0228.yaml
index 2b7783e..a798899 100644
--- a/reports/GO-2021-0228.yaml
+++ b/reports/GO-2021-0228.yaml
@@ -14,6 +14,19 @@
- TzArchive.ExtractToFunc
- ZipArchive.Open
- ZipArchive.ExtractToFunc
+derived_symbols:
+ - Create
+ - ExtractTo
+ - ExtractToFunc
+ - Open
+ - OpenFile
+ - TzArchive.ExtractToFunc
+ - TzArchive.syncFiles
+ - ZipArchive.Close
+ - ZipArchive.ExtractTo
+ - ZipArchive.ExtractToFunc
+ - ZipArchive.Flush
+ - ZipArchive.Open
links:
commit: https://github.com/unknwon/cae/commit/07971c00a1bfd9dc171c3ad0bfab5b67c2287e11
context:
