dcc6f63ef2
In order to fix the init of the logging, some refactoring of how the logger is used throughout all modules was performed. Change-Id: If116fb7c17898fdc411fc62015a26b53ac006927 Closes-Bug: #1491938
121 lines
4.3 KiB
Python
121 lines
4.3 KiB
Python
# -*- coding:utf-8 -*-
|
|
#
|
|
# Copyright 2014 Hewlett-Packard Development Company, L.P.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import copy
|
|
import logging
|
|
import warnings
|
|
|
|
import six
|
|
|
|
from bandit.core import constants
|
|
from bandit.core import context as b_context
|
|
from bandit.core import utils
|
|
|
|
warnings.formatwarning = utils.warnings_formatter
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class BanditTester():
|
|
|
|
results = None
|
|
|
|
def __init__(self, config, results, testset, debug):
|
|
self.config = config
|
|
self.results = results
|
|
self.testset = testset
|
|
self.last_result = None
|
|
self.debug = debug
|
|
|
|
def run_tests(self, raw_context, checktype):
|
|
'''Runs all tests for a certain type of check, for example
|
|
|
|
Runs all tests for a certain type of check, for example 'functions'
|
|
store results in results.
|
|
|
|
:param raw_context: Raw context dictionary
|
|
:param checktype: The type of checks to run
|
|
:return: a score based on the number and type of test results
|
|
'''
|
|
|
|
scores = {
|
|
'SEVERITY': [0] * len(constants.RANKING),
|
|
'CONFIDENCE': [0] * len(constants.RANKING)
|
|
}
|
|
|
|
tests = self.testset.get_tests(checktype)
|
|
for name, test in six.iteritems(tests):
|
|
# execute test with the an instance of the context class
|
|
temp_context = copy.copy(raw_context)
|
|
context = b_context.Context(temp_context)
|
|
try:
|
|
if hasattr(test, '_takes_config'):
|
|
# TODO(??): Possibly allow override from profile
|
|
test_config = self.config.get_option(
|
|
test._takes_config)
|
|
if test_config is None:
|
|
warnings.warn(
|
|
'"{0}" has been skipped due to missing config '
|
|
'"{1}".'.format(test.__name__, test._takes_config)
|
|
)
|
|
continue
|
|
result = test(context, test_config)
|
|
else:
|
|
result = test(context)
|
|
|
|
# the test call returns a 2- or 3-tuple
|
|
# - (issue_severity, issue_text) or
|
|
# - (issue_severity, issue_confidence, issue_text)
|
|
|
|
# add default confidence level, if not returned by test
|
|
if (result is not None and len(result) == 2):
|
|
result = (
|
|
result[0],
|
|
constants.CONFIDENCE_DEFAULT,
|
|
result[1]
|
|
)
|
|
|
|
# if we have a result, record it and update scores
|
|
if result is not None:
|
|
self.results.add(temp_context, name, result)
|
|
logger.debug(
|
|
"Issue identified by %s: %s", name, result
|
|
)
|
|
sev = constants.RANKING.index(result[0])
|
|
val = constants.RANKING_VALUES[result[0]]
|
|
scores['SEVERITY'][sev] += val
|
|
con = constants.RANKING.index(result[1])
|
|
val = constants.RANKING_VALUES[result[1]]
|
|
scores['CONFIDENCE'][con] += val
|
|
|
|
except Exception as e:
|
|
self.report_error(name, context, e)
|
|
if self.debug:
|
|
raise
|
|
logger.debug("Returning scores: %s", scores)
|
|
return scores
|
|
|
|
def report_error(self, test, context, error):
|
|
what = "Bandit internal error running: "
|
|
what += "%s " % test
|
|
what += "on file %s at line %i: " % (
|
|
context._context['filename'],
|
|
context._context['lineno']
|
|
)
|
|
what += str(error)
|
|
import traceback
|
|
what += traceback.format_exc()
|
|
logger.error(what)
|