cve-checker: accept a single version as affected

curl · Jul 18, 2024 · 30e6c3c · 30e6c3c
1 parent b79b7ec
commit 30e6c3c
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/docs/cve-checker.pl b/docs/cve-checker.pl
@@ -116,6 +116,21 @@ sub checkfile {
             }
             $affected = 1;
         }
+        elsif($l =~ /^- Affected version: [^0-9]*([0-9.]+)/) {
+            $firstaff = $1;
+            $lastaff = $1;
+            if($firstaff ne $faff{$cve}) {
+                printf STDERR "$file:%d:error: Affected version mismatch with vuln.pm\n",
+                    $secline[2];
+                return 1;
+            }
+            elsif($lastaff ne $laff{$cve}) {
+                printf STDERR "$file:%d:error: Last affected version mismatch with vuln.pm\n",
+                    $secline[2];
+                return 1;
+            }
+            $affected = 1;
+        }
         if($firstaff eq "4.0") {
             # special case if existing from 4.0
             if($l =~ /^- Not affected versions: .* >= /) {