47#define G_LOG_DOMAIN "libgvm base"
78vtref_new (
const gchar *type,
const gchar *ref_id,
const gchar *ref_text)
83 ref->
type = g_strdup (type);
85 ref->
ref_id = g_strdup (ref_id);
120 return r ? r->
type : NULL;
134 return r ? r->
ref_id : NULL;
188 s->
type = g_strdup (type);
190 s->
origin = g_strdup (origin);
194 s->
value = g_strdup (value);
227 return s ? s->
type : NULL;
241 return s ? s->
origin : NULL;
255 return s ? s->
value : NULL;
303 if ((strcmp ((
char *) str_time,
"") == 0)
304 || (strcmp ((
char *) str_time,
"$Date: $") == 0)
305 || (strcmp ((
char *) str_time,
"$Date$") == 0)
306 || (strcmp ((
char *) str_time,
"$Date:$") == 0)
307 || (strcmp ((
char *) str_time,
"$Date") == 0)
308 || (strcmp ((
char *) str_time,
"$$") == 0))
318 memset (&tm, 0,
sizeof (
struct tm));
319 if (strptime ((
char *) str_time,
"%F %T %z", &tm) == NULL)
321 memset (&tm, 0,
sizeof (
struct tm));
322 if (strptime ((
char *) str_time,
"$Date: %F %T %z", &tm) == NULL)
324 memset (&tm, 0,
sizeof (
struct tm));
325 if (strptime ((
char *) str_time,
"%a %b %d %T %Y %z", &tm) == NULL)
327 memset (&tm, 0,
sizeof (
struct tm));
328 if (strptime ((
char *) str_time,
"$Date: %a, %d %b %Y %T %z", &tm)
331 memset (&tm, 0,
sizeof (
struct tm));
332 if (strptime ((
char *) str_time,
"$Date: %a %b %d %T %Y %z",
336 g_warning (
"%s: Failed to parse time: %s", __func__,
344 epoch_time = mktime (&tm);
345 if (epoch_time == -1)
347 g_warning (
"%s: Failed to make time: %s", __func__, str_time);
353 if ((sscanf ((
char *) str_time,
"%*u-%*u-%*u %*u:%*u:%*u %d%*[^]]", &offset)
355 && (sscanf ((
char *) str_time,
"$Date: %*u-%*u-%*u %*u:%*u:%*u %d%*[^]]",
358 && (sscanf ((
char *) str_time,
"%*s %*s %*s %*u:%*u:%*u %*u %d%*[^]]",
361 && (sscanf ((
char *) str_time,
362 "$Date: %*s %*s %*s %*u %*u:%*u:%*u %d%*[^]]", &offset)
364 && (sscanf ((
char *) str_time,
365 "$Date: %*s %*s %*s %*u:%*u:%*u %*u %d%*[^]]", &offset)
368 g_warning (
"%s: Failed to parse timezone offset: %s", __func__, str_time);
376 epoch_time += ((-offset) / 100) * 60 * 60;
377 epoch_time += ((-offset) % 100) * 60;
381 epoch_time -= (offset / 100) * 60 * 60;
382 epoch_time -= (offset % 100) * 60;
449 vt->
refs = g_slist_append (vt->
refs, ref);
500nvtpref_new (
int id,
const gchar *name,
const gchar *type,
const gchar *dflt)
506 np->
name = g_strdup (name);
508 np->
type = g_strdup (type);
510 np->
dflt = g_strdup (dflt);
543 return np ? np->
id : -1;
557 return np ? np->
name : NULL;
571 return np ? np->
type : NULL;
585 return np ? np->
dflt : NULL;
651 return n ? n->
oid : NULL;
665 return n ? n->
name : NULL;
721 return n ? n->
impact : NULL;
762 return n ? g_slist_length (n->
refs) : 0;
777 return n ? g_slist_nth_data (n->
refs, p) : NULL;
807 gchar *refs, *refs2, **exclude_item;
810 gchar **exclude_split;
819 if (exclude_types && exclude_types[0])
820 exclude_split = g_strsplit (exclude_types,
",", 0);
822 exclude_split = NULL;
824 for (i = 0; i < g_slist_length (n->
refs); i++)
826 ref = g_slist_nth_data (n->
refs, i);
827 if (type && strcasecmp (ref->
type, type) != 0)
833 for (exclude_item = exclude_split; *exclude_item; exclude_item++)
835 if (strcasecmp (g_strstrip (*exclude_item), ref->
type) == 0)
849 g_strdup_printf (
"%s, %s:%s", refs, ref->
type, ref->
ref_id);
851 refs2 = g_strdup_printf (
"%s:%s", ref->
type, ref->
ref_id);
856 refs2 = g_strdup_printf (
"%s, %s", refs, ref->
ref_id);
858 refs2 = g_strdup_printf (
"%s", ref->
ref_id);
865 g_strfreev (exclude_split);
880 return n ? g_slist_length (n->
severities) : 0;
895 return n ? g_slist_nth_data (n->
severities, p) : NULL;
1006 return n ? n->
tag : NULL;
1022 gchar **split, **point;
1024 if (!n || n->
tag == NULL || !name)
1027 split = g_strsplit (n->
tag,
"|", 0);
1032 if ((strlen (*point) > strlen (name))
1033 && (strncmp (*point, name, strlen (name)) == 0)
1034 && ((*point)[strlen (name)] ==
'='))
1037 ret = g_strdup (*point + strlen (name) + 1);
1184 return n ? n->
qod : NULL;
1198 return n ? n->
family : NULL;
1211 return n ? g_slist_length (n->
prefs) : 0;
1226 return n ? g_slist_nth_data (n->
prefs, p) : NULL;
1258 n->
oid = g_strdup (oid);
1278 n->
name = g_strdup (name);
1318 n->
summary = g_strdup (summary);
1358 n->
insight = g_strdup (insight);
1438 n->
impact = g_strdup (impact);
1601 gchar *newvalue = NULL;
1606 if (!name || !name[0])
1609 if (!value || !value[0])
1612 if (!strcmp (name,
"last_modification"))
1617 else if (!strcmp (name,
"creation_date"))
1622 else if (!strcmp (name,
"severity_date"))
1624 else if (!strcmp (name,
"cvss_base"))
1641 g_strconcat (n->
tag,
"|", name,
"=", newvalue ? newvalue : value, NULL);
1646 n->
tag = g_strconcat (name,
"=", newvalue ? newvalue : value, NULL);
1670 n->
tag = g_strdup (tag);
1692 if (cvss_base && cvss_base[0])
1716 if (dependencies && dependencies[0])
1740 if (required_keys && required_keys[0])
1764 if (mandatory_keys && mandatory_keys[0])
1788 if (excluded_keys && excluded_keys[0])
1812 if (required_ports && required_ports[0])
1836 if (required_udp_ports && required_udp_ports[0])
1900 if (qod_type && qod_type[0])
1925 n->
qod = g_strdup (qod);
1947 n->
family = g_strdup (family);
2007 const gchar *ref_text)
2009 gchar **split, **item;
2017 split = g_strsplit (ref_ids,
",", 0);
2019 for (item = split; *item; item++)
2026 if (strcmp (
id,
"") == 0)
2037 split2 = g_strsplit (
id,
":", 2);
2038 if (split2[0] && split2[1])
2040 g_strfreev (split2);
2248 return g_hash_table_new_full (g_str_hash, g_str_equal, g_free,
2261 g_hash_table_destroy (nvtis);
2274 g_hash_table_insert (
2290 return g_hash_table_lookup (nvtis, oid);
vtref_t * nvti_vtref(const nvti_t *n, guint p)
Get the n'th reference of the NVT.
Definition nvti.c:775
struct vtseverity vtseverity_t
The structure for a severity of a VT.
nvti_t * nvti_new(void)
Create a new (empty) nvti structure.
Definition nvti.c:597
int nvti_put_impact(nvti_t *n, gchar *impact)
Set the impact text of a NVT, using the given memory.
Definition nvti.c:1452
void vtseverity_free(vtseverity_t *s)
Free memory of a vtseverity structure.
Definition nvti.c:205
gchar * nvti_dependencies(const nvti_t *n)
Get the dependencies list.
Definition nvti.c:1070
int nvti_add_required_keys(nvti_t *n, const gchar *key)
Add a required key of a NVT.
Definition nvti.c:2058
guint nvti_pref_len(const nvti_t *n)
Get the number of preferences of the NVT.
Definition nvti.c:1209
int nvti_set_qod(nvti_t *n, const gchar *qod)
Set the QoD of a NVT.
Definition nvti.c:1918
gchar * nvti_detection(const nvti_t *n)
Get the text about detection.
Definition nvti.c:1154
gchar * nvti_required_udp_ports(const nvti_t *n)
Get the required udp ports list.
Definition nvti.c:1140
int nvti_set_solution(nvti_t *n, const gchar *solution)
Set the solution of a NVT.
Definition nvti.c:1510
gchar * nvti_get_tag(const nvti_t *n, const gchar *name)
Get a tag value by a tag name.
Definition nvti.c:1020
gchar * nvti_summary(const nvti_t *n)
Get the summary.
Definition nvti.c:677
int nvti_set_solution_type(nvti_t *n, const gchar *solution_type)
Set the solution type of a NVT.
Definition nvti.c:1551
gchar * nvti_required_ports(const nvti_t *n)
Get the required ports list.
Definition nvti.c:1126
int nvti_put_insight(nvti_t *n, gchar *insight)
Set the insight text of a NVT, using the given memory.
Definition nvti.c:1372
gchar * nvti_refs(const nvti_t *n, const gchar *type, const gchar *exclude_types, guint use_types)
Get references as string.
Definition nvti.c:804
double nvti_severity_score(const nvti_t *n)
Get the maximum severity score.
Definition nvti.c:906
gchar * nvtpref_type(const nvtpref_t *np)
Get the Type of a NVT Preference.
Definition nvti.c:569
int nvti_set_excluded_keys(nvti_t *n, const gchar *excluded_keys)
Set the excluded keys of a NVT.
Definition nvti.c:1782
struct nvti nvti_t
The structure of a information record that corresponds to a NVT.
int nvti_set_qod_type(nvti_t *n, const gchar *qod_type)
Set the QoD type of a NVT.
Definition nvti.c:1894
int nvti_add_excluded_keys(nvti_t *n, const gchar *key)
Add a excluded key of a NVT.
Definition nvti.c:2122
int nvti_put_detection(nvti_t *n, gchar *detection)
Set the detection text of a NVT, using the given memory.
Definition nvti.c:1873
nvtis_t * nvtis_new(void)
Make a collection of NVT Infos.
Definition nvti.c:2246
int nvti_set_dependencies(nvti_t *n, const gchar *dependencies)
Set the dependencies of a NVT.
Definition nvti.c:1710
int nvti_set_required_ports(nvti_t *n, const gchar *required_ports)
Set the required ports of a NVT.
Definition nvti.c:1806
int nvti_set_oid(nvti_t *n, const gchar *oid)
Set the OID of a NVT Info.
Definition nvti.c:1252
int nvti_add_required_udp_ports(nvti_t *n, const gchar *port)
Add a required udp port of a NVT.
Definition nvti.c:2186
int nvti_set_tag(nvti_t *n, const gchar *tag)
Set the tags of a NVT.
Definition nvti.c:1663
int nvti_set_cvss_base(nvti_t *n, const gchar *cvss_base)
Set the CVSS base of an NVT.
Definition nvti.c:1686
int nvti_set_mandatory_keys(nvti_t *n, const gchar *mandatory_keys)
Set the mandatory keys of a NVT.
Definition nvti.c:1758
int nvti_put_name(nvti_t *n, gchar *name)
Set the name of a NVT, using the given memory.
Definition nvti.c:1292
int nvti_put_family(nvti_t *n, gchar *family)
Set the family of a NVT, using the given memory.
Definition nvti.c:1961
gint nvti_category(const nvti_t *n)
Get the category for this NVT.
Definition nvti.c:1237
int nvti_set_impact(nvti_t *n, const gchar *impact)
Set the impact text of a NVT.
Definition nvti.c:1432
const gchar * vtseverity_type(const vtseverity_t *s)
Get the type of a severity.
Definition nvti.c:225
int nvti_add_required_ports(nvti_t *n, const gchar *port)
Add a required port of a NVT.
Definition nvti.c:2154
struct nvtpref nvtpref_t
The structure for a preference of a NVT.
gchar * nvti_family(const nvti_t *n)
Get the family name.
Definition nvti.c:1196
gchar * nvti_severity_vector_from_tag(const nvti_t *n)
Get the severity score.
Definition nvti.c:938
struct vtref vtref_t
The structure for a cross reference of a VT.
static void free_nvti_for_hash_table(gpointer nvti)
Free an NVT Info, for g_hash_table_destroy.
Definition nvti.c:2235
gchar * nvti_solution_method(const nvti_t *n)
Get the solution method.
Definition nvti.c:990
guint nvti_vtseverities_len(const nvti_t *n)
Get the number of severities of the NVT.
Definition nvti.c:878
const nvtpref_t * nvti_pref(const nvti_t *n, guint p)
Get the n'th preferences of the NVT.
Definition nvti.c:1224
gchar * nvti_qod(const nvti_t *n)
Get the QoD.
Definition nvti.c:1182
gchar * nvti_excluded_keys(const nvti_t *n)
Get the excluded keys list.
Definition nvti.c:1112
int nvti_set_summary(nvti_t *n, const gchar *summary)
Set the summary of a NVT.
Definition nvti.c:1312
gchar * nvti_name(const nvti_t *n)
Get the name.
Definition nvti.c:663
gchar * nvti_oid(const nvti_t *n)
Get the OID string.
Definition nvti.c:649
nvtpref_t * nvtpref_new(int id, const gchar *name, const gchar *type, const gchar *dflt)
Create a new nvtpref structure filled with the given values.
Definition nvti.c:500
int nvti_put_affected(nvti_t *n, gchar *affected)
Set the affected text of a NVT, using the given memory.
Definition nvti.c:1412
int nvti_put_solution(nvti_t *n, gchar *solution)
Set the solution of a NVT, using the given memory.
Definition nvti.c:1530
double vtseverity_score(const vtseverity_t *s)
Get the score of a severity.
Definition nvti.c:281
const gchar * vtref_type(const vtref_t *r)
Get the type of a reference.
Definition nvti.c:118
int nvti_add_pref(nvti_t *n, nvtpref_t *np)
Add a preference to the NVT Info.
Definition nvti.c:2218
int nvti_put_summary(nvti_t *n, gchar *summary)
Set the summary of a NVT, using the given memory.
Definition nvti.c:1332
const gchar * vtseverity_value(const vtseverity_t *s)
Get the value of a severity.
Definition nvti.c:253
int nvti_set_insight(nvti_t *n, const gchar *insight)
Set the insight text of a NVT.
Definition nvti.c:1352
vtref_t * vtref_new(const gchar *type, const gchar *ref_id, const gchar *ref_text)
Create a new vtref structure filled with the given values.
Definition nvti.c:78
gchar * nvti_cvss_base(const nvti_t *n)
Get the CVSS base.
Definition nvti.c:1056
int nvti_set_required_keys(nvti_t *n, const gchar *required_keys)
Set the required keys of a NVT.
Definition nvti.c:1734
int nvti_add_vtseverity(nvti_t *vt, vtseverity_t *s)
Add a severity to the VT Info.
Definition nvti.c:462
void nvtpref_free(nvtpref_t *np)
Free memory of a nvtpref structure.
Definition nvti.c:521
int nvti_set_solution_method(nvti_t *n, const gchar *solution_method)
Set the solution method of a NVT.
Definition nvti.c:1572
int nvtpref_id(const nvtpref_t *np)
Get the ID of a NVT Preference.
Definition nvti.c:541
int nvti_set_name(nvti_t *n, const gchar *name)
Set the name of a NVT.
Definition nvti.c:1272
nvti_t * nvtis_lookup(nvtis_t *nvtis, const char *oid)
Add an NVT Info to a collection of NVT Infos.
Definition nvti.c:2288
gchar * nvti_qod_type(const nvti_t *n)
Get the QoD type.
Definition nvti.c:1168
int nvti_add_mandatory_keys(nvti_t *n, const gchar *key)
Add a mandatory key of a NVT.
Definition nvti.c:2090
time_t nvti_creation_time(const nvti_t *n)
Get the creation time.
Definition nvti.c:733
gchar * nvti_affected(const nvti_t *n)
Get the text about affected systems.
Definition nvti.c:705
vtseverity_t * nvti_vtseverity(const nvti_t *n, guint p)
Get the n'th reference of the NVT.
Definition nvti.c:893
vtseverity_t * vtseverity_new(const gchar *type, const gchar *origin, int date, double score, const gchar *value)
Create a new vtseverity structure filled with the given values.
Definition nvti.c:182
gchar * nvti_solution(const nvti_t *n)
Get the solution.
Definition nvti.c:962
int nvti_set_modification_time(nvti_t *n, const time_t modification_time)
Set the modification time of a NVT.
Definition nvti.c:1491
int nvti_set_creation_time(nvti_t *n, const time_t creation_time)
Set the creation time of a NVT.
Definition nvti.c:1472
gchar * nvti_required_keys(const nvti_t *n)
Get the required keys list.
Definition nvti.c:1084
gchar * nvti_insight(const nvti_t *n)
Get the text about insight.
Definition nvti.c:691
int nvti_add_refs(nvti_t *n, const gchar *type, const gchar *ref_ids, const gchar *ref_text)
Add many new vtref from a comma-separated list.
Definition nvti.c:2006
time_t nvti_modification_time(const nvti_t *n)
Get the modification time.
Definition nvti.c:747
void vtref_free(vtref_t *ref)
Free memory of a vtref structure.
Definition nvti.c:98
const gchar * vtseverity_origin(const vtseverity_t *s)
Get the origin of a severity.
Definition nvti.c:239
guint nvti_vtref_len(const nvti_t *n)
Get the number of references of the NVT.
Definition nvti.c:760
int nvti_set_required_udp_ports(nvti_t *n, const gchar *required_udp_ports)
Set the required udp ports of a NVT.
Definition nvti.c:1830
gchar * nvti_mandatory_keys(const nvti_t *n)
Get the mandatory keys list.
Definition nvti.c:1098
gchar * nvtpref_default(const nvtpref_t *np)
Get the Default of a NVT Preference.
Definition nvti.c:583
int nvti_set_family(nvti_t *n, const gchar *family)
Set the family of a NVT.
Definition nvti.c:1941
gchar * nvtpref_name(const nvtpref_t *np)
Get the Name of a NVT Preference.
Definition nvti.c:555
static time_t parse_nvt_timestamp(const gchar *str_time)
Try convert an NVT tag time string into epoch time or return 0 upon parse errors.
Definition nvti.c:297
int nvti_set_affected(nvti_t *n, const gchar *affected)
Set the affected text of a NVT.
Definition nvti.c:1392
int vtseverity_date(const vtseverity_t *s)
Get the date of a severity.
Definition nvti.c:267
gchar * nvti_solution_type(const nvti_t *n)
Get the solution type.
Definition nvti.c:976
const gchar * vtref_id(const vtref_t *r)
Get the id of a reference.
Definition nvti.c:132
int nvti_add_tag(nvti_t *n, const gchar *name, const gchar *value)
Add a tag to the NVT tags. The tag names "severity_date", "last_modification" and "creation_date" are...
Definition nvti.c:1599
void nvtis_add(nvtis_t *nvtis, nvti_t *nvti)
Add an NVT Info to a collection of NVT Infos.
Definition nvti.c:2271
gchar * nvti_impact(const nvti_t *n)
Get the text about impact.
Definition nvti.c:719
const gchar * vtref_text(const vtref_t *r)
Get the text of a reference.
Definition nvti.c:146
void nvtis_free(nvtis_t *nvtis)
Free a collection of NVT Infos.
Definition nvti.c:2258
int nvti_set_detection(nvti_t *n, const gchar *detection)
Set the detection text of a NVT.
Definition nvti.c:1853
gchar * nvti_tag(const nvti_t *n)
Get the tags.
Definition nvti.c:1004
int nvti_set_category(nvti_t *n, const gint category)
Set the category type of a NVT Info.
Definition nvti.c:1981
void nvti_free(nvti_t *n)
Free memory of a nvti structure.
Definition nvti.c:608
int nvti_add_vtref(nvti_t *vt, vtref_t *ref)
Add a reference to the VT Info.
Definition nvti.c:444
Protos and data structures for NVT Information data sets.
GHashTable nvtis_t
A collection of information records corresponding to NVTs.
Definition nvti.h:252
The structure of a information record that corresponds to a NVT.
Definition nvti.c:394
gchar * solution_method
The solution method.
Definition nvti.c:408
gchar * insight
The insight.
Definition nvti.c:399
gchar * affected
Affected systems.
Definition nvti.c:400
gchar * cvss_base
CVSS base score for this NVT.
Definition nvti.c:411
gchar * required_keys
List of required KB keys of this NVT.
Definition nvti.c:414
time_t creation_time
Time of creation, seconds since epoch.
Definition nvti.c:403
gchar * solution
The solution.
Definition nvti.c:406
gchar * impact
Impact of vulnerability.
Definition nvti.c:401
gchar * family
Family the NVT belongs to.
Definition nvti.c:431
gchar * excluded_keys
List of excluded KB keys of this NVT.
Definition nvti.c:416
gchar * required_udp_ports
List of required UDP ports of this NVT.
Definition nvti.c:419
GSList * refs
Collection of VT references.
Definition nvti.c:425
gchar * tag
List of tags attached to this NVT.
Definition nvti.c:410
gchar * oid
Object ID.
Definition nvti.c:395
gchar * name
The name.
Definition nvti.c:396
gint category
The category, this NVT belongs to.
Definition nvti.c:430
gchar * qod_type
Quality of detection type.
Definition nvti.c:422
GSList * severities
Collection of VT severities.
Definition nvti.c:426
gchar * mandatory_keys
List of mandatory KB keys of this NVT.
Definition nvti.c:415
gchar * detection
Detection description.
Definition nvti.c:421
gchar * solution_type
The solution type.
Definition nvti.c:407
gchar * dependencies
List of dependencies of this NVT.
Definition nvti.c:413
gchar * qod
Quality of detection.
Definition nvti.c:423
time_t modification_time
Time of last change, sec. since epoch.
Definition nvti.c:404
gchar * required_ports
List of required ports of this NVT.
Definition nvti.c:417
gchar * summary
The summary.
Definition nvti.c:398
GSList * prefs
Collection of NVT preferences.
Definition nvti.c:427
The structure for a preference of a NVT.
Definition nvti.c:477
gchar * type
Preference type.
Definition nvti.c:479
gchar * dflt
Default value of the preference.
Definition nvti.c:481
int id
Preference ID.
Definition nvti.c:478
gchar * name
Name of the preference.
Definition nvti.c:480
The structure for a cross reference of a VT.
Definition nvti.c:58
gchar * type
Reference type ("cve", "bid", ...)
Definition nvti.c:59
gchar * ref_id
Actual reference ID ("CVE-2018-1234", etc)
Definition nvti.c:60
gchar * ref_text
Optional additional text.
Definition nvti.c:61
The structure for a severity of a VT.
Definition nvti.c:159
gchar * origin
Definition nvti.c:161
int date
Timestamp in seconds since epoch, defaults to VT creation date.
Definition nvti.c:163
double score
The score derived from the value in range [0.0-10.0].
Definition nvti.c:164
gchar * value
The value which corresponds to the type.
Definition nvti.c:165
gchar * type
Severity type ("cvss_base_v2", ...)
Definition nvti.c:160