[FFmpeg-devel] [PATCH] add tools/compare-cvelists.sh

[Michael Niedermayer]

This compares the MITRE CVE list with our webpage security list and
produces a diff, so people can investigate, fix, backport and correct
differences

Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
---
 tools/compare-cvelists.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100755 tools/compare-cvelists.sh

diff --git a/tools/compare-cvelists.sh b/tools/compare-cvelists.sh
new file mode 100755
index 00000000000..db5a198c310
--- /dev/null
+++ b/tools/compare-cvelists.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+
+wget -q -O cvelist-our-html https://git.ffmpeg.org/gitweb/ffmpeg-web.git/blob_plain/HEAD:/src/security
+wget -q -O cvelist-html     https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ffmpeg
+
+grep '>CVE-[0-2][90][0-9][0-9]-[0-9]*<' cvelist-html | sed 's/.*\(CVE-[0-2][90][0-9][0-9]-[0-9]*\)<.*/\1/g' |sort|uniq > cvelist
+tr ', (' "\n" <cvelist-our-html | grep 'CVE-[0-2][90][0-9][0-9]-[0-9]*' | sed 's/.*\(CVE-[0-2][90][0-9][0-9]-[0-9]*\)[^0-9].*/\1/g' | sort | uniq  > cvelist-our
+diff -u cvelist-our cvelist > cvelist.diff
+diffstat cvelist.diff
+echo please make sure CVE numbers added to our security page have been or will be backported
+echo see cvelist.diff, delete cvelist  cvelist.diff  cvelist-html  cvelist-our  cvelist-our-html to cleanup
-- 
2.48.1