47#define G_LOG_DOMAIN "libgvm base"
78vtref_new (
const gchar *type,
const gchar *ref_id,
const gchar *ref_text)
83 ref->
type = g_strdup (type);
85 ref->
ref_id = g_strdup (ref_id);
120 return r ? r->
type : NULL;
134 return r ? r->
ref_id : NULL;
188 s->
type = g_strdup (type);
190 s->
origin = g_strdup (origin);
194 s->
value = g_strdup (value);
227 return s ? s->
type : NULL;
241 return s ? s->
origin : NULL;
255 return s ? s->
value : NULL;
303 if ((strcmp ((
char *) str_time,
"") == 0)
304 || (strcmp ((
char *) str_time,
"$Date: $") == 0)
305 || (strcmp ((
char *) str_time,
"$Date$") == 0)
306 || (strcmp ((
char *) str_time,
"$Date:$") == 0)
307 || (strcmp ((
char *) str_time,
"$Date") == 0)
308 || (strcmp ((
char *) str_time,
"$$") == 0))
318 memset (&tm, 0,
sizeof (
struct tm));
319 if (strptime ((
char *) str_time,
"%F %T %z", &tm) == NULL)
321 memset (&tm, 0,
sizeof (
struct tm));
322 if (strptime ((
char *) str_time,
"$Date: %F %T %z", &tm) == NULL)
324 memset (&tm, 0,
sizeof (
struct tm));
325 if (strptime ((
char *) str_time,
"%a %b %d %T %Y %z", &tm) == NULL)
327 memset (&tm, 0,
sizeof (
struct tm));
328 if (strptime ((
char *) str_time,
"$Date: %a, %d %b %Y %T %z", &tm)
331 memset (&tm, 0,
sizeof (
struct tm));
332 if (strptime ((
char *) str_time,
"$Date: %a %b %d %T %Y %z",
336 g_warning (
"%s: Failed to parse time: %s", __func__,
344 epoch_time = mktime (&tm);
345 if (epoch_time == -1)
347 g_warning (
"%s: Failed to make time: %s", __func__, str_time);
353 if ((sscanf ((
char *) str_time,
"%*u-%*u-%*u %*u:%*u:%*u %d%*[^]]", &offset)
355 && (sscanf ((
char *) str_time,
"$Date: %*u-%*u-%*u %*u:%*u:%*u %d%*[^]]",
358 && (sscanf ((
char *) str_time,
"%*s %*s %*s %*u:%*u:%*u %*u %d%*[^]]",
361 && (sscanf ((
char *) str_time,
362 "$Date: %*s %*s %*s %*u %*u:%*u:%*u %d%*[^]]", &offset)
364 && (sscanf ((
char *) str_time,
365 "$Date: %*s %*s %*s %*u:%*u:%*u %*u %d%*[^]]", &offset)
368 g_warning (
"%s: Failed to parse timezone offset: %s", __func__, str_time);
376 epoch_time += ((-offset) / 100) * 60 * 60;
377 epoch_time += ((-offset) % 100) * 60;
381 epoch_time -= (offset / 100) * 60 * 60;
382 epoch_time -= (offset % 100) * 60;
449 vt->
refs = g_slist_append (vt->
refs, ref);
507 np->
name = g_strdup (name);
509 np->
type = g_strdup (type);
511 np->
dflt = g_strdup (dflt);
544 return np ? np->
id : -1;
558 return np ? np->
name : NULL;
572 return np ? np->
type : NULL;
586 return np ? np->
dflt : NULL;
652 return n ? n->
oid : NULL;
666 return n ? n->
name : NULL;
722 return n ? n->
impact : NULL;
763 return n ? g_slist_length (n->
refs) : 0;
778 return n ? g_slist_nth_data (n->
refs, p) : NULL;
808 gchar *refs, *refs2, **exclude_item;
811 gchar **exclude_split;
820 if (exclude_types && exclude_types[0])
821 exclude_split = g_strsplit (exclude_types,
",", 0);
823 exclude_split = NULL;
825 for (i = 0; i < g_slist_length (n->
refs); i++)
827 ref = g_slist_nth_data (n->
refs, i);
828 if (type && strcasecmp (ref->
type, type) != 0)
834 for (exclude_item = exclude_split; *exclude_item; exclude_item++)
836 if (strcasecmp (g_strstrip (*exclude_item), ref->
type) == 0)
850 g_strdup_printf (
"%s, %s:%s", refs, ref->
type, ref->
ref_id);
852 refs2 = g_strdup_printf (
"%s:%s", ref->
type, ref->
ref_id);
857 refs2 = g_strdup_printf (
"%s, %s", refs, ref->
ref_id);
859 refs2 = g_strdup_printf (
"%s", ref->
ref_id);
866 g_strfreev (exclude_split);
881 return n ? g_slist_length (n->
severities) : 0;
896 return n ? g_slist_nth_data (n->
severities, p) : NULL;
1007 return n ? n->
tag : NULL;
1023 gchar **split, **point;
1025 if (!n || n->
tag == NULL || !name)
1028 split = g_strsplit (n->
tag,
"|", 0);
1033 if ((strlen (*point) > strlen (name))
1034 && (strncmp (*point, name, strlen (name)) == 0)
1035 && ((*point)[strlen (name)] ==
'='))
1038 ret = g_strdup (*point + strlen (name) + 1);
1185 return n ? n->
qod : NULL;
1199 return n ? n->
family : NULL;
1212 return n ? g_slist_length (n->
prefs) : 0;
1227 return n ? g_slist_nth_data (n->
prefs, p) : NULL;
1259 n->
oid = g_strdup (oid);
1279 n->
name = g_strdup (name);
1319 n->
summary = g_strdup (summary);
1359 n->
insight = g_strdup (insight);
1439 n->
impact = g_strdup (impact);
1602 gchar *newvalue = NULL;
1607 if (!name || !name[0])
1610 if (!value || !value[0])
1613 if (!strcmp (name,
"last_modification"))
1618 else if (!strcmp (name,
"creation_date"))
1623 else if (!strcmp (name,
"severity_date"))
1625 else if (!strcmp (name,
"cvss_base"))
1642 g_strconcat (n->
tag,
"|", name,
"=", newvalue ? newvalue : value, NULL);
1647 n->
tag = g_strconcat (name,
"=", newvalue ? newvalue : value, NULL);
1671 n->
tag = g_strdup (tag);
1693 if (cvss_base && cvss_base[0])
1717 if (dependencies && dependencies[0])
1741 if (required_keys && required_keys[0])
1765 if (mandatory_keys && mandatory_keys[0])
1789 if (excluded_keys && excluded_keys[0])
1813 if (required_ports && required_ports[0])
1837 if (required_udp_ports && required_udp_ports[0])
1901 if (qod_type && qod_type[0])
1926 n->
qod = g_strdup (qod);
1948 n->
family = g_strdup (family);
2008 const gchar *ref_text)
2010 gchar **split, **item;
2018 split = g_strsplit (ref_ids,
",", 0);
2020 for (item = split; *item; item++)
2027 if (strcmp (
id,
"") == 0)
2038 split2 = g_strsplit (
id,
":", 2);
2039 if (split2[0] && split2[1])
2041 g_strfreev (split2);
2249 return g_hash_table_new_full (g_str_hash, g_str_equal, g_free,
2262 g_hash_table_destroy (nvtis);
2275 g_hash_table_insert (
2291 return g_hash_table_lookup (nvtis, oid);
vtref_t * nvti_vtref(const nvti_t *n, guint p)
Get the n'th reference of the NVT.
Definition nvti.c:776
struct vtseverity vtseverity_t
The structure for a severity of a VT.
nvti_t * nvti_new(void)
Create a new (empty) nvti structure.
Definition nvti.c:598
int nvti_put_impact(nvti_t *n, gchar *impact)
Set the impact text of a NVT, using the given memory.
Definition nvti.c:1453
void vtseverity_free(vtseverity_t *s)
Free memory of a vtseverity structure.
Definition nvti.c:205
gchar * nvti_dependencies(const nvti_t *n)
Get the dependencies list.
Definition nvti.c:1071
int nvti_add_required_keys(nvti_t *n, const gchar *key)
Add a required key of a NVT.
Definition nvti.c:2059
guint nvti_pref_len(const nvti_t *n)
Get the number of preferences of the NVT.
Definition nvti.c:1210
int nvti_set_qod(nvti_t *n, const gchar *qod)
Set the QoD of a NVT.
Definition nvti.c:1919
gchar * nvti_detection(const nvti_t *n)
Get the text about detection.
Definition nvti.c:1155
gchar * nvti_required_udp_ports(const nvti_t *n)
Get the required udp ports list.
Definition nvti.c:1141
int nvti_set_solution(nvti_t *n, const gchar *solution)
Set the solution of a NVT.
Definition nvti.c:1511
gchar * nvti_get_tag(const nvti_t *n, const gchar *name)
Get a tag value by a tag name.
Definition nvti.c:1021
gchar * nvti_summary(const nvti_t *n)
Get the summary.
Definition nvti.c:678
int nvti_set_solution_type(nvti_t *n, const gchar *solution_type)
Set the solution type of a NVT.
Definition nvti.c:1552
gchar * nvti_required_ports(const nvti_t *n)
Get the required ports list.
Definition nvti.c:1127
int nvti_put_insight(nvti_t *n, gchar *insight)
Set the insight text of a NVT, using the given memory.
Definition nvti.c:1373
gchar * nvti_refs(const nvti_t *n, const gchar *type, const gchar *exclude_types, guint use_types)
Get references as string.
Definition nvti.c:805
double nvti_severity_score(const nvti_t *n)
Get the maximum severity score.
Definition nvti.c:907
gchar * nvtpref_type(const nvtpref_t *np)
Get the Type of a NVT Preference.
Definition nvti.c:570
int nvti_set_excluded_keys(nvti_t *n, const gchar *excluded_keys)
Set the excluded keys of a NVT.
Definition nvti.c:1783
struct nvti nvti_t
The structure of a information record that corresponds to a NVT.
int nvti_set_qod_type(nvti_t *n, const gchar *qod_type)
Set the QoD type of a NVT.
Definition nvti.c:1895
int nvti_add_excluded_keys(nvti_t *n, const gchar *key)
Add a excluded key of a NVT.
Definition nvti.c:2123
int nvti_put_detection(nvti_t *n, gchar *detection)
Set the detection text of a NVT, using the given memory.
Definition nvti.c:1874
nvtis_t * nvtis_new(void)
Make a collection of NVT Infos.
Definition nvti.c:2247
int nvti_set_dependencies(nvti_t *n, const gchar *dependencies)
Set the dependencies of a NVT.
Definition nvti.c:1711
int nvti_set_required_ports(nvti_t *n, const gchar *required_ports)
Set the required ports of a NVT.
Definition nvti.c:1807
int nvti_set_oid(nvti_t *n, const gchar *oid)
Set the OID of a NVT Info.
Definition nvti.c:1253
int nvti_add_required_udp_ports(nvti_t *n, const gchar *port)
Add a required udp port of a NVT.
Definition nvti.c:2187
int nvti_set_tag(nvti_t *n, const gchar *tag)
Set the tags of a NVT.
Definition nvti.c:1664
int nvti_set_cvss_base(nvti_t *n, const gchar *cvss_base)
Set the CVSS base of an NVT.
Definition nvti.c:1687
int nvti_set_mandatory_keys(nvti_t *n, const gchar *mandatory_keys)
Set the mandatory keys of a NVT.
Definition nvti.c:1759
int nvti_put_name(nvti_t *n, gchar *name)
Set the name of a NVT, using the given memory.
Definition nvti.c:1293
int nvti_put_family(nvti_t *n, gchar *family)
Set the family of a NVT, using the given memory.
Definition nvti.c:1962
gint nvti_category(const nvti_t *n)
Get the category for this NVT.
Definition nvti.c:1238
int nvti_set_impact(nvti_t *n, const gchar *impact)
Set the impact text of a NVT.
Definition nvti.c:1433
const gchar * vtseverity_type(const vtseverity_t *s)
Get the type of a severity.
Definition nvti.c:225
int nvti_add_required_ports(nvti_t *n, const gchar *port)
Add a required port of a NVT.
Definition nvti.c:2155
struct nvtpref nvtpref_t
The structure for a preference of a NVT.
gchar * nvti_family(const nvti_t *n)
Get the family name.
Definition nvti.c:1197
gchar * nvti_severity_vector_from_tag(const nvti_t *n)
Get the severity score.
Definition nvti.c:939
struct vtref vtref_t
The structure for a cross reference of a VT.
static void free_nvti_for_hash_table(gpointer nvti)
Free an NVT Info, for g_hash_table_destroy.
Definition nvti.c:2236
gchar * nvti_solution_method(const nvti_t *n)
Get the solution method.
Definition nvti.c:991
guint nvti_vtseverities_len(const nvti_t *n)
Get the number of severities of the NVT.
Definition nvti.c:879
const nvtpref_t * nvti_pref(const nvti_t *n, guint p)
Get the n'th preferences of the NVT.
Definition nvti.c:1225
gchar * nvti_qod(const nvti_t *n)
Get the QoD.
Definition nvti.c:1183
gchar * nvti_excluded_keys(const nvti_t *n)
Get the excluded keys list.
Definition nvti.c:1113
int nvti_set_summary(nvti_t *n, const gchar *summary)
Set the summary of a NVT.
Definition nvti.c:1313
gchar * nvti_name(const nvti_t *n)
Get the name.
Definition nvti.c:664
gchar * nvti_oid(const nvti_t *n)
Get the OID string.
Definition nvti.c:650
int nvti_put_affected(nvti_t *n, gchar *affected)
Set the affected text of a NVT, using the given memory.
Definition nvti.c:1413
nvtpref_t * nvtpref_new(int id, gchar *name, gchar *type, gchar *dflt)
Create a new nvtpref structure filled with the given values.
Definition nvti.c:501
int nvti_put_solution(nvti_t *n, gchar *solution)
Set the solution of a NVT, using the given memory.
Definition nvti.c:1531
double vtseverity_score(const vtseverity_t *s)
Get the score of a severity.
Definition nvti.c:281
const gchar * vtref_type(const vtref_t *r)
Get the type of a reference.
Definition nvti.c:118
int nvti_add_pref(nvti_t *n, nvtpref_t *np)
Add a preference to the NVT Info.
Definition nvti.c:2219
int nvti_put_summary(nvti_t *n, gchar *summary)
Set the summary of a NVT, using the given memory.
Definition nvti.c:1333
const gchar * vtseverity_value(const vtseverity_t *s)
Get the value of a severity.
Definition nvti.c:253
int nvti_set_insight(nvti_t *n, const gchar *insight)
Set the insight text of a NVT.
Definition nvti.c:1353
vtref_t * vtref_new(const gchar *type, const gchar *ref_id, const gchar *ref_text)
Create a new vtref structure filled with the given values.
Definition nvti.c:78
gchar * nvti_cvss_base(const nvti_t *n)
Get the CVSS base.
Definition nvti.c:1057
int nvti_set_required_keys(nvti_t *n, const gchar *required_keys)
Set the required keys of a NVT.
Definition nvti.c:1735
int nvti_add_vtseverity(nvti_t *vt, vtseverity_t *s)
Add a severity to the VT Info.
Definition nvti.c:463
void nvtpref_free(nvtpref_t *np)
Free memory of a nvtpref structure.
Definition nvti.c:522
int nvti_set_solution_method(nvti_t *n, const gchar *solution_method)
Set the solution method of a NVT.
Definition nvti.c:1573
int nvtpref_id(const nvtpref_t *np)
Get the ID of a NVT Preference.
Definition nvti.c:542
int nvti_set_name(nvti_t *n, const gchar *name)
Set the name of a NVT.
Definition nvti.c:1273
nvti_t * nvtis_lookup(nvtis_t *nvtis, const char *oid)
Add an NVT Info to a collection of NVT Infos.
Definition nvti.c:2289
gchar * nvti_qod_type(const nvti_t *n)
Get the QoD type.
Definition nvti.c:1169
int nvti_add_mandatory_keys(nvti_t *n, const gchar *key)
Add a mandatory key of a NVT.
Definition nvti.c:2091
time_t nvti_creation_time(const nvti_t *n)
Get the creation time.
Definition nvti.c:734
gchar * nvti_affected(const nvti_t *n)
Get the text about affected systems.
Definition nvti.c:706
vtseverity_t * nvti_vtseverity(const nvti_t *n, guint p)
Get the n'th reference of the NVT.
Definition nvti.c:894
vtseverity_t * vtseverity_new(const gchar *type, const gchar *origin, int date, double score, const gchar *value)
Create a new vtseverity structure filled with the given values.
Definition nvti.c:182
gchar * nvti_solution(const nvti_t *n)
Get the solution.
Definition nvti.c:963
int nvti_set_modification_time(nvti_t *n, const time_t modification_time)
Set the modification time of a NVT.
Definition nvti.c:1492
int nvti_set_creation_time(nvti_t *n, const time_t creation_time)
Set the creation time of a NVT.
Definition nvti.c:1473
gchar * nvti_required_keys(const nvti_t *n)
Get the required keys list.
Definition nvti.c:1085
gchar * nvti_insight(const nvti_t *n)
Get the text about insight.
Definition nvti.c:692
int nvti_add_refs(nvti_t *n, const gchar *type, const gchar *ref_ids, const gchar *ref_text)
Add many new vtref from a comma-separated list.
Definition nvti.c:2007
time_t nvti_modification_time(const nvti_t *n)
Get the modification time.
Definition nvti.c:748
void vtref_free(vtref_t *ref)
Free memory of a vtref structure.
Definition nvti.c:98
const gchar * vtseverity_origin(const vtseverity_t *s)
Get the origin of a severity.
Definition nvti.c:239
guint nvti_vtref_len(const nvti_t *n)
Get the number of references of the NVT.
Definition nvti.c:761
int nvti_set_required_udp_ports(nvti_t *n, const gchar *required_udp_ports)
Set the required udp ports of a NVT.
Definition nvti.c:1831
gchar * nvti_mandatory_keys(const nvti_t *n)
Get the mandatory keys list.
Definition nvti.c:1099
gchar * nvtpref_default(const nvtpref_t *np)
Get the Default of a NVT Preference.
Definition nvti.c:584
int nvti_set_family(nvti_t *n, const gchar *family)
Set the family of a NVT.
Definition nvti.c:1942
gchar * nvtpref_name(const nvtpref_t *np)
Get the Name of a NVT Preference.
Definition nvti.c:556
static time_t parse_nvt_timestamp(const gchar *str_time)
Try convert an NVT tag time string into epoch time or return 0 upon parse errors.
Definition nvti.c:297
int nvti_set_affected(nvti_t *n, const gchar *affected)
Set the affected text of a NVT.
Definition nvti.c:1393
int vtseverity_date(const vtseverity_t *s)
Get the date of a severity.
Definition nvti.c:267
gchar * nvti_solution_type(const nvti_t *n)
Get the solution type.
Definition nvti.c:977
const gchar * vtref_id(const vtref_t *r)
Get the id of a reference.
Definition nvti.c:132
int nvti_add_tag(nvti_t *n, const gchar *name, const gchar *value)
Add a tag to the NVT tags. The tag names "severity_date", "last_modification" and "creation_date" are...
Definition nvti.c:1600
void nvtis_add(nvtis_t *nvtis, nvti_t *nvti)
Add an NVT Info to a collection of NVT Infos.
Definition nvti.c:2272
gchar * nvti_impact(const nvti_t *n)
Get the text about impact.
Definition nvti.c:720
const gchar * vtref_text(const vtref_t *r)
Get the text of a reference.
Definition nvti.c:146
void nvtis_free(nvtis_t *nvtis)
Free a collection of NVT Infos.
Definition nvti.c:2259
int nvti_set_detection(nvti_t *n, const gchar *detection)
Set the detection text of a NVT.
Definition nvti.c:1854
gchar * nvti_tag(const nvti_t *n)
Get the tags.
Definition nvti.c:1005
int nvti_set_category(nvti_t *n, const gint category)
Set the category type of a NVT Info.
Definition nvti.c:1982
void nvti_free(nvti_t *n)
Free memory of a nvti structure.
Definition nvti.c:609
int nvti_add_vtref(nvti_t *vt, vtref_t *ref)
Add a reference to the VT Info.
Definition nvti.c:444
Protos and data structures for NVT Information data sets.
GHashTable nvtis_t
A collection of information records corresponding to NVTs.
Definition nvti.h:252
The structure of a information record that corresponds to a NVT.
Definition nvti.c:394
gchar * solution_method
The solution method.
Definition nvti.c:408
gchar * insight
The insight.
Definition nvti.c:399
gchar * affected
Affected systems.
Definition nvti.c:400
gchar * cvss_base
CVSS base score for this NVT.
Definition nvti.c:411
gchar * required_keys
List of required KB keys of this NVT.
Definition nvti.c:414
time_t creation_time
Time of creation, seconds since epoch.
Definition nvti.c:403
gchar * solution
The solution.
Definition nvti.c:406
gchar * impact
Impact of vulnerability.
Definition nvti.c:401
gchar * family
Family the NVT belongs to.
Definition nvti.c:431
gchar * excluded_keys
List of excluded KB keys of this NVT.
Definition nvti.c:416
gchar * required_udp_ports
List of required UDP ports of this NVT.
Definition nvti.c:419
GSList * refs
Collection of VT references.
Definition nvti.c:425
gchar * tag
List of tags attached to this NVT.
Definition nvti.c:410
gchar * oid
Object ID.
Definition nvti.c:395
gchar * name
The name.
Definition nvti.c:396
gint category
The category, this NVT belongs to.
Definition nvti.c:430
gchar * qod_type
Quality of detection type.
Definition nvti.c:422
GSList * severities
Collection of VT severities.
Definition nvti.c:426
gchar * mandatory_keys
List of mandatory KB keys of this NVT.
Definition nvti.c:415
gchar * detection
Detection description.
Definition nvti.c:421
gchar * solution_type
The solution type.
Definition nvti.c:407
gchar * dependencies
List of dependencies of this NVT.
Definition nvti.c:413
gchar * qod
Quality of detection.
Definition nvti.c:423
time_t modification_time
Time of last change, sec. since epoch.
Definition nvti.c:404
gchar * required_ports
List of required ports of this NVT.
Definition nvti.c:417
gchar * summary
The summary.
Definition nvti.c:398
GSList * prefs
Collection of NVT preferences.
Definition nvti.c:427
The structure for a preference of a NVT.
Definition nvti.c:478
gchar * type
Preference type.
Definition nvti.c:480
gchar * dflt
Default value of the preference.
Definition nvti.c:482
int id
Preference ID.
Definition nvti.c:479
gchar * name
Name of the preference.
Definition nvti.c:481
The structure for a cross reference of a VT.
Definition nvti.c:58
gchar * type
Reference type ("cve", "bid", ...)
Definition nvti.c:59
gchar * ref_id
Actual reference ID ("CVE-2018-1234", etc)
Definition nvti.c:60
gchar * ref_text
Optional additional text.
Definition nvti.c:61
The structure for a severity of a VT.
Definition nvti.c:159
gchar * origin
Definition nvti.c:161
int date
Timestamp in seconds since epoch, defaults to VT creation date.
Definition nvti.c:163
double score
The score derived from the value in range [0.0-10.0].
Definition nvti.c:164
gchar * value
The value which corresponds to the type.
Definition nvti.c:165
gchar * type
Severity type ("cvss_base_v2", ...)
Definition nvti.c:160