add: Add GSAD wrapper for GET_REPORT_VULNS

ozgen · greenbonebot · commit 183e11b04076 · 2026-05-04T08:46:15.000+02:00
Add the GSAD-side GET_REPORT_VULNS request handling to send the command
to gvmd and wrap the returned GMP response.
diff --git a/src/gsad.c b/src/gsad.c
@@ -1030,6 +1030,7 @@ exec_gmp_get (gsad_http_connection_t *con, gsad_connection_info_t *con_info,
   ELSE (get_report_operating_systems)
   ELSE (get_report_ports)
   ELSE (get_report_tls_certificates)
+  ELSE (get_report_vulns)
   ELSE (get_reports)
   ELSE (get_report_config)
   ELSE (get_report_configs)
diff --git a/src/gsad_gmp.c b/src/gsad_gmp.c
@@ -10169,6 +10169,100 @@ get_report_tls_certificates_gmp (gvm_connection_t *connection,
                        g_string_free (xml, FALSE), response_data);
 }
 
+/**
+ * @brief Get report vulnerabilities and return the result.
+ *
+ * @param[in]  connection      Connection to manager.
+ * @param[in]  credentials     Username and password for authentication.
+ * @param[in]  params          Request parameters.
+ * @param[out] response_data   Extra data return for the HTTP response.
+ *
+ * @return Report vulnerabilities XML.
+ */
+char *
+get_report_vulns_gmp (gvm_connection_t *connection,
+                      gsad_credentials_t *credentials, params_t *params,
+                      gsad_command_response_data_t *response_data)
+{
+  GString *xml;
+  entity_t entity;
+  const char *report_id;
+  const char *filter;
+  const char *filter_id;
+  gboolean details, ignore_pagination;
+  int ret;
+
+  details = params_value_bool (params, "details");
+  ignore_pagination = params_value_bool (params, "ignore_pagination");
+
+  report_id = params_value (params, "report_id");
+  filter = params_value (params, "filter");
+  filter_id = params_value (params, "filter_id");
+
+  CHECK_VARIABLE_INVALID (report_id, "Get Report Vulnerabilities");
+
+  if (filter == NULL || filter_id)
+    filter = "";
+
+  ret = gvm_connection_sendf_xml (connection,
+                                  "<get_report_vulns"
+                                  " report_id=\"%s\""
+                                  " details=\"%d\""
+                                  " ignore_pagination=\"%d\""
+                                  " filter=\"%s\""
+                                  " filt_id=\"%s\"/>",
+                                  report_id, details, ignore_pagination, filter,
+                                  filter_id ? filter_id : FILT_ID_NONE);
+
+  if (ret == -1)
+    {
+      gsad_command_response_data_set_status_code (
+        response_data, MHD_HTTP_INTERNAL_SERVER_ERROR);
+      return gsad_http_create_gsad_message (
+        credentials,
+        "An internal error occurred while getting report vulnerabilities. "
+        "The report vulnerabilities could not be delivered. "
+        "Diagnostics: Failure to send command to manager daemon.",
+        response_data);
+    }
+
+  xml = g_string_new ("<get_report_vulns>");
+
+  entity = NULL;
+  if (read_entity_and_string_c (connection, &entity, &xml))
+    {
+      gsad_command_response_data_set_status_code (
+        response_data, MHD_HTTP_INTERNAL_SERVER_ERROR);
+      return gsad_http_create_gsad_message (
+        credentials,
+        "An internal error occurred while getting report vulnerabilities. "
+        "The report vulnerabilities could not be delivered. "
+        "Diagnostics: Failure to receive response from manager daemon.",
+        response_data);
+    }
+
+  if (gmp_success (entity) != 1)
+    {
+      gchar *message;
+
+      set_http_status_from_entity (entity, response_data);
+
+      message = gsad_http_create_gsad_message (
+        credentials, entity_attribute (entity, "status_text"), response_data);
+
+      g_string_free (xml, TRUE);
+      free_entity (entity);
+      return message;
+    }
+
+  free_entity (entity);
+
+  g_string_append (xml, "</get_report_vulns>");
+
+  return envelope_gmp (connection, credentials, params,
+                       g_string_free (xml, FALSE), response_data);
+}
+
 /**
  * @brief Run alert for a report.
  *
diff --git a/src/gsad_gmp.h b/src/gsad_gmp.h
@@ -97,6 +97,9 @@ char *
 get_report_tls_certificates_gmp (gvm_connection_t *, gsad_credentials_t *,
                                  params_t *, gsad_command_response_data_t *);
 char *
+get_report_vulns_gmp (gvm_connection_t *, gsad_credentials_t *, params_t *,
+                      gsad_command_response_data_t *);
+char *
 get_reports_gmp (gvm_connection_t *, gsad_credentials_t *, params_t *,
                  gsad_command_response_data_t *);
 
diff --git a/src/gsad_validator.c b/src/gsad_validator.c
@@ -180,6 +180,7 @@ gsad_init_validator ()
                      "|(get_report_operating_systems)"
                      "|(get_report_ports)"
                      "|(get_report_tls_certificates)"
+                     "|(get_report_vulns)"
                      "|(get_reports)"
                      "|(get_report_config)"
                      "|(get_report_configs)"
