Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix the top level tests, fix a typo in the name. #98

Merged
merged 1 commit into from
Apr 3, 2024

Conversation

vaikas
Copy link
Member

@vaikas vaikas commented Apr 3, 2024

Fixes #96

Also the names of the tests were wrong so fixed those so it's easier to find where they came from.

I think the test was wrong, because I see the combo/backdoor/py_setuptools when I run this:

➜  bincapz git:(fix-tests) ✗ go run . third_party/yara-rules-full.yar testdata/Python/valyrian_debug_setup.py | grep combo/backdoor
3/HIGH  combo/backdoor/py_setuptools  python library installer that executes external commands: "os.system( setup( setuptools"

And the other one seems like it does indeed just print . instead of the full path:

➜  bincapz git:(fix-tests) ✗ go run . -diff testdata/macOS/libffmpeg.dirty.dylib testdata/macOS/libffmpeg.dylib
Changed: .
Previous Risk: 🚨 4/CRITICAL
New Risk:      ✅ 2/MEDIUM

I think the test was wrong, because I see the combo/backdoor/py_setuptools
when I run this:

```
➜  bincapz git:(fix-tests) ✗ go run . third_party/yara-rules-full.yar testdata/Python/valyrian_debug_setup.py | grep combo/backdoor
3/HIGH  combo/backdoor/py_setuptools  python library installer that executes external commands: "os.system( setup( setuptools"
```

And the other one seems like it does indeed just print `.` instead of the full path:

```
➜  bincapz git:(fix-tests) ✗ go run . -diff testdata/macOS/libffmpeg.dirty.dylib testdata/macOS/libffmpeg.dylib
Changed: .
Previous Risk: 🚨 4/CRITICAL
New Risk:      ✅ 2/MEDIUM
```

Signed-off-by: Ville Aikas <vaikas@chainguard.dev>
@jedsalazar jedsalazar merged commit 87d6447 into chainguard-dev:main Apr 3, 2024
1 check passed
egibs pushed a commit to egibs/malcontent that referenced this pull request Aug 5, 2024
Fix the top level tests, fix a typo in the name.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Tests from head seem to not work.
2 participants