tree f253af60a5d22224260f99371af862a0b01ab8b0
parent c387d46ab5e9f30939798d86222e5ea7691b0753
author Tatiana Bradley <tatianabradley@google.com> 1715092394 -0400
committer Tatiana Bradley <tatianabradley@google.com> 1715190177 +0000

internal/report: add quick fix for module merging issue

Previously, FixModules would attempt to merge versions even if it
resulted in an invalid version list (e.g., with overlapping ranges).

As a quick fix, bail out from the merge attempt if any of the
results wouldn't make sense, and add a note to the report.

This can be improved in the future by continuing to attempt to merge
modules that can be merged instead of bailing out early.

Change-Id: I5074cd3d04251423da9afa1a52933f0fbeab4b5f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/580435
Reviewed-by: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>