oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-02-14 19:46:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix panic when CycloneDX BOM missing metadata.component (#895)

Browse Source
This commit is contained in:
Keith Zantow 2022-03-17 10:22:35 -04:00 committed by GitHub
parent 6ef3e45ffc
commit f4734d28b3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
internal/formats/common/cyclonedxhelpers/decoder.go
View File

@ -46,7 +46,7 @@ func GetDecoder(format cyclonedx.BOMFileFormat) sbom.Decoder {
func toSyftModel(bom *cyclonedx.BOM) (*sbom.SBOM, error) { func toSyftModel(bom *cyclonedx.BOM) (*sbom.SBOM, error) {
meta := source.Metadata{} meta := source.Metadata{}
if bom.Metadata != nil { if bom.Metadata != nil && bom.Metadata.Component != nil {
meta = decodeMetadata(bom.Metadata.Component) meta = decodeMetadata(bom.Metadata.Component)
} }
s := &sbom.SBOM{ s := &sbom.SBOM{

15
internal/formats/common/cyclonedxhelpers/decoder_test.go
View File

@ -258,3 +258,18 @@ func Test_decode(t *testing.T) {
}) })
} }
} }
func Test_missingDataDecode(t *testing.T) {
bom := &cyclonedx.BOM{
Metadata: nil,
Components: &[]cyclonedx.Component{},
}
_, err := toSyftModel(bom)
assert.NoError(t, err)
bom.Metadata = &cyclonedx.Metadata{}
_, err = toSyftModel(bom)
assert.NoError(t, err)
}