greenbone / gvm-libs Goto Github PK

Greenbone Vulnerability Management Libraries

License: GNU General Public License v2.0

CMake 2.93% C 96.39% C++ 0.37% Dockerfile 0.31%

greenbone vulnerability vulnerability-scanners vulnerability-detection vulnerability-management libraries openvas c extended tooling

gvm-libs's People

Contributors

Stargazers

Watchers

gvm-libs's Issues

Error: %02d’ directive output may be truncated writing between 2 and 11 bytes into a region of size between 5 and 12 [-Werror=format-truncation=]

Expected behavior

gvm-libs compiles.

Current behavior

gvm-libs do not compile:

[ 81%] Building C object nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_var.c.o
[ 83%] Building C object nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_wmi.c.o
[ 84%] Building C object nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_isotime.c.o
/home/xxx/src/gvm/9/gvm-libs/nasl/nasl_isotime.c: In function ‘nasl_isotime_now’:
/home/xxx/src/gvm/9/gvm-libs/nasl/nasl_isotime.c:105:45: error: ‘%02d’ directive output may be truncated writing between 2 and 11 bytes into a region of size between 5 and 12 [-Werror=format-truncation=]
       snprintf (timebuf, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                             ^~~~
/home/xxx/src/gvm/9/gvm-libs/nasl/nasl_isotime.c:105:40: note: directive argument in the range [-2147483647, 2147483647]
       snprintf (timebuf, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from /usr/include/stdio.h:862,
                 from /home/xxx/src/gvm/9/gvm-libs/nasl/nasl_isotime.c:54:
/usr/include/x86_64-linux-gnu/bits/stdio2.h:64:10: note: ‘__builtin___snprintf_chk’ output between 16 and 68 bytes into a destination of size 16
   return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        __bos (__s), __fmt, __va_arg_pack ());
        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
make[2]: *** [nasl/CMakeFiles/openvas_nasl_shared.dir/build.make:580: nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_isotime.c.o] Error 1
make[1]: *** [CMakeFiles/Makefile2:350: nasl/CMakeFiles/openvas_nasl_shared.dir/all] Error 2
make: *** [Makefile:163: all] Error 2

Steps to reproduce

git fetch
rm -rf BUILD
mkdir BUILD
cd BUILD
cmake ..
make

GVM versions

gsa                                       v7.0.3-57-g293cf3c7f
gvm                                       v7.0.3-103-gce3caed0
gvm-libs                                  v9.0.3-7-gdb1306c1
gvm-tools                                 v1.4.1-239-gbb98ebd
openvas-scanner                           v5.1.3-5-ga7a583a
openvas-smb                               v1.0.4-2-g564d5a0
ospd                                      b989e7f

Environment

Operating system:
Debian testing

Installation method / source:
git checked out sources

gvm-libs release branch will not compile on Ubuntu 18.04

Expected behavior

Normal build process

Current behavior

git checkout release branch or tag and make failes at gvm-libs/nasl/nasl_isotime.c
Do a "git checkout master" and build process will finish normally.

Steps to reproduce

Using git clone and checking out release tag or branch:

~$ git clone https://github.com/greenbone/gvm-libs.git
~/gvm-libs$ git checkout tags/v9.0.3 (or "git checkout openvas-libraries-9.0")
Note: checking out 'tags/v9.0.3'.
HEAD is now at c32cbc91

~/gvm-libs$ mkdir build
~/gvm-libs$ cd build
~/gvm-libs/build$ cmake ..
~/gvm-libs/build$ make
Scanning dependencies of target openvas_base_shared
[  1%] Building C object base/CMakeFiles/openvas_base_shared.dir/array.c.o
[  2%] Building C object base/CMakeFiles/openvas_base_shared.dir/credentials.c.o
.
.
[ 84%] Building C object nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_isotime.c.o
/home/asgeir/gvm-libs/nasl/nasl_isotime.c: In function ‘add_years_to_isotime’:
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:561:52: error: ‘%02d’ directive output may be truncated writing between 2 and 5 bytes into a region of size between 0 and 5 [-Werror=format-truncation=]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                                    ^~~~
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:561:34: note: directive argument in the range [-1936, 869]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:561:34: note: directive argument in the range [-1936, 869]
In file included from /usr/include/stdio.h:862:0,
                 from /home/asgeir/gvm-libs/nasl/nasl_isotime.c:54:
/usr/include/x86_64-linux-gnu/bits/stdio2.h:64:10: note: ‘__builtin___snprintf_chk’ output between 16 and 50 bytes into a destination of size 16
   return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        __bos (__s), __fmt, __va_arg_pack ());
        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/asgeir/gvm-libs/nasl/nasl_isotime.c: In function ‘nasl_isotime_add’:
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:522:52: error: ‘%02d’ directive output may be truncated writing between 2 and 5 bytes into a region of size between 0 and 5 [-Werror=format-truncation=]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                                    ^~~~
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:522:34: note: directive argument in the range [-1936, 869]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:522:34: note: directive argument in the range [-1936, 869]
In file included from /usr/include/stdio.h:862:0,
                 from /home/asgeir/gvm-libs/nasl/nasl_isotime.c:54:
/usr/include/x86_64-linux-gnu/bits/stdio2.h:64:10: note: ‘__builtin___snprintf_chk’ output between 16 and 50 bytes into a destination of size 16
   return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        __bos (__s), __fmt, __va_arg_pack ());
        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:483:56: error: ‘%02d’ directive output may be truncated writing between 2 and 3 bytes into a region of size between 0 and 3 [-Werror=format-truncation=]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                                        ^~~~
/home/asgeir/gvm-libs/nasl/nasl_isotime.c:483:34: note: directive argument in the range [-59, 59]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from /usr/include/stdio.h:862:0,
                 from /home/asgeir/gvm-libs/nasl/nasl_isotime.c:54:
/usr/include/x86_64-linux-gnu/bits/stdio2.h:64:10: note: ‘__builtin___snprintf_chk’ output between 16 and 44 bytes into a destination of size 16
   return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        __bos (__s), __fmt, __va_arg_pack ());
        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
nasl/CMakeFiles/openvas_nasl_shared.dir/build.make:1056: recipe for target 'nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_isotime.c.o' failed
make[2]: *** [nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_isotime.c.o] Error 1
CMakeFiles/Makefile2:344: recipe for target 'nasl/CMakeFiles/openvas_nasl_shared.dir/all' failed
make[1]: *** [nasl/CMakeFiles/openvas_nasl_shared.dir/all] Error 2
Makefile:162: recipe for target 'all' failed
make: *** [all] Error 2

Environment

Operating system:
$ uname -a
Linux xxx 4.15.0-34-generic #37-Ubuntu SMP Mon Aug 27 15:21:48 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Installation method / source:
(source installation)

Deprecated API used

Hello,
when compiling with "-Wall -Werror", treating warnings as errors the compilation fails compiling misc/network.c. Calling function 'gnutls_compression_get' is deprecated in gnutls 3.6+:

See:
https://www.gnutls.org/manual/html_node/Compatibility-API.html

[ 26%] Building C object misc/CMakeFiles/openvas_misc_shared.dir/network.c.o
cd /builddir/build/BUILD/gvm-libs-9.0.2/misc && /usr/bin/cc -DENABLE_LDAP_AUTH=1 -DOPENVASLIB_VERSION_MAJOR=9 -DOPENVASLIB_VERSION_MINOR=0 -DOPENVASLIB_VERSION_PATCH=0 -Dopenvas_misc_shared_EXPORTS -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/p11-kit-1  -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -mcet -fcf-protection -Wno-format-truncation -Wformat -Wformat-security -O2 -D_FORTIFY_SOURCE=2 -fstack-protector -Wall -Wextra -fPIC -g -Werror -fPIC   -DOPENVASSD_CONF=\"/etc/openvas/openvassd.conf\" -DOPENVASLIB_VERSION=\"9.0.2\" -DOPENVAS_STATE_DIR=\"/var/lib/openvas\" -DOPENVAS_DATA_DIR=\"/usr/share/openvas\" -DOPENVAS_SYSCONF_DIR=\"/etc/openvas\" -o CMakeFiles/openvas_misc_shared.dir/network.c.o   -c /builddir/build/BUILD/gvm-libs-9.0.2/misc/network.c
/builddir/build/BUILD/gvm-libs-9.0.2/misc/network.c: In function 'socket_get_ssl_compression':
/builddir/build/BUILD/gvm-libs-9.0.2/misc/network.c:946:3: error: 'gnutls_compression_get' is deprecated [-Werror=deprecated-declarations]
   switch (gnutls_compression_get (session))
   ^~~~~~
In file included from /usr/include/gnutls/gnutls.h:2952,
                 from /builddir/build/BUILD/gvm-libs-9.0.2/misc/network.c:44:
/usr/include/gnutls/compat.h:225:1: note: declared here
 gnutls_compression_get(gnutls_session_t session) _GNUTLS_GCC_ATTR_DEPRECATED;
 ^~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
make[2]: *** [misc/CMakeFiles/openvas_misc_shared.dir/build.make:131: misc/CMakeFiles/openvas_misc_shared.dir/network.c.o] Error 1
make[2]: Leaving directory '/builddir/build/BUILD/gvm-libs-9.0.2'
make[1]: Leaving directory '/builddir/build/BUILD/gvm-libs-9.0.2'
make[1]: *** [CMakeFiles/Makefile2:249: misc/CMakeFiles/openvas_misc_shared.dir/all] Error 2
make: *** [Makefile:166: all] Error 2

openvas: segfault in libgvm_base.so.21.4.2

Expected behavior

No Segfault

Actual behavior

[ 2693.808760] traps: nmap[35860] trap invalid opcode ip:55817d153440 sp:7fffb5e326e0 error:0 in nmap[55817d105000+8e000]
[ 3359.422992] traps: nmap[49098] trap invalid opcode ip:564ed9eca440 sp:7ffe1c1e2010 error:0 in nmap[564ed9e7c000+8e000]
[ 3362.479530] traps: nmap[49100] trap invalid opcode ip:55abef014440 sp:7fffbe46dce0 error:0 in nmap[55abeefc6000+8e000]
[ 3440.949354] traps: nmap[49061] trap invalid opcode ip:55fd5d253440 sp:7fff20e88640 error:0 in nmap[55fd5d205000+8e000]
[ 3453.341204] nmap[49004]: segfault at 7efe666dd020 ip 000055dfacbe9448 sp 00007fffde1dc920 error 4 in nmap[55dfacb9b000+8e000]
[ 3453.341216] Code: 24 08 0f b7 cb 48 39 e8 73 09 48 8d 14 08 48 39 d5 72 0f 48 39 e8 76 0c 48 8d 54 0d 00 48 39 d0 73 02 0f 0b 48 89 c7 48 89 ee <f3> a4 66 41 c7 44 24 06 00 00 4c 89 e0 5a 5b 5d 41 5c 41 5d 41 5e
[ 4191.012447] traps: nmap[70547] trap invalid opcode ip:55949bb89440 sp:7ffc176d6d00 error:0 in nmap[55949bb3b000+8e000]
[ 5130.462535] traps: nmap[91191] trap invalid opcode ip:558715bcc440 sp:7fff806baaf0 error:0 in nmap[558715b7e000+8e000]
[ 7261.504889] traps: nmap[127905] trap invalid opcode ip:5626d9ef7440 sp:7ffc469912b0 error:0 in nmap[5626d9ea9000+8e000]
[ 9403.617868] openvas[2488]: segfault at 7f498fae1d80 ip 00007f4991a76313 sp 00007fff87ed2610 error 4 in libgvm_base.so.21.4.2[7f4991a74000+8000]
[ 9403.617879] Code: 5d 41 5e 41 5f c3 55 48 89 fd bf 10 00 00 00 53 48 89 f3 50 e8 1e df ff ff 48 89 28 48 89 58 08 5a 5b 5d c3 48 85 ff 74 2b 55 <83> 7f 10 00 48 89 fd 75 08 48 8b 3f e8 94 e8 ff ff 48 8b 7d 18 48
[20059.115781] traps: openvas[161562] general protection fault ip:7f627b0a1896 sp:7fffe0c00948 error:0 in ld-musl-x86_64.so.1[7f627b093000+48000]
[20338.874947] traps: nmap[167472] trap invalid opcode ip:55816621e440 sp:7ffef834f8e0 error:0 in nmap[5581661d0000+8e000]
[39743.448666] traps: openvas[48511] general protection fault ip:7fb82608d896 sp:7fffb961cff8 error:0 in ld-musl-x86_64.so.1[7fb82607f000+48000]
[42038.536454] openvas[72556]: segfault at 0 ip 00007f2fcd70a081 sp 00007ffdc4a7f5a8 error 4 in ld-musl-x86_64.so.1[7f2fcd6d0000+48000]
[42038.536467] Code: 20 c7 44 24 0c 30 00 00 00 48 89 44 24 18 e8 ce fe ff ff 48 81 c4 d8 00 00 00 c3 89 f8 99 31 d0 29 d0 c3 31 f6 e9 7d 09 00 00 <0f> be 17 89 d0 83 ea 09 83 fa 04 77 05 48 ff c7 eb ee 3c 20 74 f7
[54412.214396] traps: openvas[144887] general protection fault ip:7f3844d4f896 sp:7ffccc6df338 error:0 in ld-musl-x86_64.so.1[7f3844d41000+48000]
[81753.907458] traps: nmap[330293] trap invalid opcode ip:5609dabcc440 sp:7fff86095920 error:0 in nmap[5609dab7e000+8e000]
[81852.061828] nmap[330299]: segfault at 7f1fb29a0020 ip 00005589dbcb2448 sp 00007ffe740c76a0 error 4 in nmap[5589dbc64000+8e000]
[81852.061866] Code: 24 08 0f b7 cb 48 39 e8 73 09 48 8d 14 08 48 39 d5 72 0f 48 39 e8 76 0c 48 8d 54 0d 00 48 39 d0 73 02 0f 0b 48 89 c7 48 89 ee <f3> a4 66 41 c7 44 24 06 00 00 4c 89 e0 5a 5b 5d 41 5c 41 5d 41 5e
[81915.730041] traps: nmap[330307] trap invalid opcode ip:559711ad3440 sp:7ffc79e170b0 error:0 in nmap[559711a85000+8e000]
[82046.006118] traps: nmap[339261] trap invalid opcode ip:55a2f8890440 sp:7fffdbbab200 error:0 in nmap[55a2f8842000+8e000]
[82205.134292] traps: nmap[347358] trap invalid opcode ip:557c04521440 sp:7ffc7aa75510 error:0 in nmap[557c044d3000+8e000]
[82251.198955] traps: nmap[351206] trap invalid opcode ip:562658bea440 sp:7fff706de6e0 error:0 in nmap[562658b9c000+8e000]
[82404.256601] traps: nmap[363056] trap invalid opcode ip:55ac34db6440 sp:7ffe30cf4f70 error:0 in nmap[55ac34d68000+8e000]
[82960.779933] traps: nmap[376132] trap invalid opcode ip:56457442a440 sp:7ffcee51e470 error:0 in nmap[5645743dc000+8e000]
[83482.088115] traps: nmap[396343] trap invalid opcode ip:559faf5fc440 sp:7fff817eb360 error:0 in nmap[559faf5ae000+8e000]
[83485.654411] traps: nmap[398085] trap invalid opcode ip:5631cbbba440 sp:7ffdb22b3ad0 error:0 in nmap[5631cbb6c000+8e000]
[83701.749437] nmap[404134]: segfault at 7fde00003020 ip 0000559481cdb448 sp 00007ffe68d6c540 error 4 in nmap[559481c8d000+8e000]
[83701.749447] Code: 24 08 0f b7 cb 48 39 e8 73 09 48 8d 14 08 48 39 d5 72 0f 48 39 e8 76 0c 48 8d 54 0d 00 48 39 d0 73 02 0f 0b 48 89 c7 48 89 ee <f3> a4 66 41 c7 44 24 06 00 00 4c 89 e0 5a 5b 5d 41 5c 41 5d 41 5e
[84947.667435] traps: nmap[432432] trap invalid opcode ip:5566ae0a1440 sp:7ffd2a52f780 error:0 in nmap[5566ae053000+8e000]
[85905.583853] nmap[448314]: segfault at 7fed19cca020 ip 000055a60fbde448 sp 00007ffd5e8935e0 error 4 in nmap[55a60fb90000+8e000]
[85905.583864] Code: 24 08 0f b7 cb 48 39 e8 73 09 48 8d 14 08 48 39 d5 72 0f 48 39 e8 76 0c 48 8d 54 0d 00 48 39 d0 73 02 0f 0b 48 89 c7 48 89 ee <f3> a4 66 41 c7 44 24 06 00 00 4c 89 e0 5a 5b 5d 41 5c 41 5d 41 5e
[86291.951492] traps: nmap[458906] trap invalid opcode ip:55b732c21440 sp:7fffdad874c0 error:0 in nmap[55b732bd3000+8e000]
[88792.139689] traps: openvas[376047] general protection fault ip:7f6f0cdb1896 sp:7ffce68edc48 error:0 in ld-musl-x86_64.so.1[7f6f0cda3000+48000]
[91899.867229] traps: nmap[489571] trap invalid opcode ip:5641d022e440 sp:7fff95dfe730 error:0 in nmap[5641d01e0000+8e000]
[91918.141517] traps: nmap[489592] trap invalid opcode ip:560cb5499440 sp:7ffe286d8cd0 error:0 in nmap[560cb544b000+8e000]
[91948.451528] traps: nmap[489598] trap invalid opcode ip:56160af38440 sp:7fffb7ed41a0 error:0 in nmap[56160aeea000+8e000]
[91967.426301] traps: nmap[489580] trap invalid opcode ip:55cfa6100440 sp:7fffd6ec3110 error:0 in nmap[55cfa60b2000+8e000]
[92294.752484] traps: nmap[491526] trap invalid opcode ip:5626df88f440 sp:7fffced184e0 error:0 in nmap[5626df841000+8e000]
[92589.964141] traps: nmap[493348] trap invalid opcode ip:56508ad73440 sp:7ffd26f2c600 error:0 in nmap[56508ad25000+8e000]
[93833.598764] traps: openvas[489491] general protection fault ip:7f3b38d8c896 sp:7ffd272f0c58 error:0 in ld-musl-x86_64.so.1[7f3b38d7e000+48000]

other maschine:

2021-08-10T19:04:22,713960+02:00 openvas[1875915]: segfault at 7f334a74f620 ip 00007f334c826313 sp 00007fff741cea00 error 4 in libgvm_base.so.21.4.2[7f334c824000+8000]
2021-08-10T19:04:22,713978+02:00 Code: 5d 41 5e 41 5f c3 55 48 89 fd bf 10 00 00 00 53 48 89 f3 50 e8 1e df ff ff 48 89 28 48 89 58 08 5a 5b 5d c3 48 85 ff 74 2b 55 <83> 7f 10 00 48 89 fd 75 08 48 8b 3f e8 94 e8 ff ff 48 8b 7d 18 48

Steps to reproduce

Just running a simple scanning.
Target has 32 IP addresses
Alive Test: Consider Alive
Scanning Config: Full and fast (unmodified)

GVM versions

gvmd: v21.4.3
gsa: v21.4.2
gvm-libs: v21.4.2
gvm-tools: v21.6.1
ospd: v21.4.3
ospd-openvas: v21.4.2
openvas-scanner: v21.4.2
openvas-smb: v21.4.0
python-gvm: v21.6.0

Environment

Operating system: Alpine Linux 3.14

Installation method / source: (packages, source installation) source with some needed patches (https://github.com/Secure-Compliance-Solutions-LLC/GVM-APK-build)

Logfiles

In the logs are nothing to find about errors...

[1.0beta1] libuuid requirements

Why are version 2.25.0 are needed?
I can compile it without any problems on CentOS7 using version 2.23.0.

upgrade from 9.0.3 to 1.0.0 version

hi team.
Just want to mention that set a new version from 9.0.3 to 1.0.0 makes the upgrade path difficult.
Package managers saw it as a downgrade because for the number.
There's a reason why it is not set as 10.0.0 ?
Thanks.

.: Francesco

[21.4.1] Source code signature is missing

The gpg signature for the tar ball is missing.

[20.8.0] unable to build the lib (may be used uninitialized in this function)

OS: CentOS 7.8
The build fails with:

/builddir/build/BUILD/gvm-libs-20.8.0/boreas/util.c: In function 'set_socket':
/builddir/build/BUILD/gvm-libs-20.8.0/boreas/util.c:533:19: error: 'soc' may be used uninitialized in this function [-Werror=maybe-uninitialized]
   *scanner_socket = soc;
                   ^
cc1: all warnings being treated as errors
make[2]: *** [boreas/CMakeFiles/gvm_boreas_shared.dir/util.c.o] Error 1
make[2]: *** Waiting for unfinished jobs....
cd /builddir/build/BUILD/gvm-libs-20.8.0/util && /usr/bin/cmake3 -E cmake_symlink_library libgvm_util.so.20.8.0 libgvm_util.so.20 libgvm_util.so
make[2]: Leaving directory `/builddir/build/BUILD/gvm-libs-20.8.0'
[ 95%] Built target gvm_util_shared
make[2]: Leaving directory `/builddir/build/BUILD/gvm-libs-20.8.0'
make[1]: *** [boreas/CMakeFiles/gvm_boreas_shared.dir/all] Error 2
make[1]: *** Waiting for unfinished jobs....
/builddir/build/BUILD/gvm-libs-20.8.0/base/networking.c: In function 'ip_islocalhost':
/builddir/build/BUILD/gvm-libs-20.8.0/base/networking.c:841:18: error: 'addr.s_addr' may be used uninitialized in this function [-Werror=maybe-uninitialized]
               if (addr_p->s_addr == sin->sin_addr.s_addr)
                  ^
cc1: all warnings being treated as errors
make[2]: *** [base/CMakeFiles/gvm_base_shared.dir/networking.c.o] Error 1

package naming issue for official linux maintainers/developers

#189

@bjoernricks

I confirm that there is definitely misunderstanding about openvas-libraries vs gvm-libs from our side.

For now, also for all other components (scanner,manager,assistant) for your next stable.

ping for issue -->

@fcolista for Alpine
@shibumi, @anthraxx, @GIJack for Arch
@hsntgm for Gentoo
@rhertzog, @szlin for Debian
@sbrun for Kali
@atomicturtle for the Atomic repo
@mrazavi64 for the ~mrazavi PPAs
@tgurr ?
@cheese1 for Fedora

While bumping your next stable version the below information will create confusion for package maintainers/developers.

https://community.greenbone.net/t/about-the-source-edition-gse-category/176
"GVM-9 (stable, previously named OpenVAS-9)".

Could you clearly/officially confirm/explain your all package names for your next stables?

"GVM-9 (stable, previously named OpenVAS-9)".

gvm-libs-1.0.0 or gvm-libraries-1.0.0 or openvas-libraries-1.0.0
gvm-scanner-6.0.0 or openvas-scanner-6.0.0
gvm-manager-8.0.0 or gvmd-8.0.0 or openvas-manager-8.0.0 or greenbone-vulnerability-manager-8.0.0

Best Regards,

Edit

Some history on the renaming background: #197 (comment)
Draft overview over the renaming: #197 (comment)
Project decided to release gvm-libs with version 10.0 instead of 1.0 (Package managers saw it as a downgrade) #197 (comment)
Important migration informations for openvasmd 7.0 to gvmd 8.0 for maintainers: #197 (comment)

[21.4.1] source code verification fails.

The verification of the source code will fail:

LANG=C gpg --verify SOURCES/v21.4.1.tar.gz.asc SOURCES/gvm-libs-21.4.1.tar.gz
gpg: Signature made Wed Jun 23 14:44:31 2021 CEST
gpg: using RSA key 8AE4BE429B60A59B311C2E739823FAA60ED1E580
gpg: BAD signature from "Greenbone Community Feed integrity key" [unknown

It looks like the key is correct.

Openvas scanner would pending infinitely Because of misuse of pthread_cond_signal

Expected behavior

Openvas scanner CanNot finish a task but wait infinitely, Though all alive targets have finished the dectetions.

Actual behavior

It is Occasionally that the main process of the task would pending infinitely at the point:
In file: <boreas/sniffer.c>, the parent thread
Funcs: <start_sniffer_thread>
err = pthread_create (sniffer_thread_id, NULL, sniffer_thread, scanner);
...
pthread_mutex_lock (&mutex);
===> pthread_cond_wait (&cond); //point 1
pthread_mutex_unlock (&mutex);
Is conflict with child thread
Funcs: <sniffer_thread>
pthread_mutex_lock (&mutex);
===> pthread_cond_signal (&cond); //point 2
pthread_mutex_unlock (&mutex);

If the child thread function pthread_cond_signal happens before the parent pthread_cond_wait,
then the parent will pend at point 1 forever.
In <start_sniffer_thread>, <pthread_mutex_lock> must be placed before pthread_create to avoid the Dead case.

Steps to reproduce

Start a simple task with target's 'Alive Test' method isnot 'Consider Alive'.

GVM versions

**gvm-libs: All

Environment

Operating system:

Linux

Installation method / source: (packages, source installation)

Logfiles

[20.8.1] Build test fails with missing initializer for field 'tcpv4soc'

The build tests fails with:

> [ 85%] Building C object boreas/CMakeFiles/util-test.dir/util_tests.c.o
> cd /builddir/build/BUILD/gvm-libs-20.8.1/boreas && /usr/lib64/ccache/cc -DGVM_LIBS_VERSION=\"20.8.1\" -DREDIS_SOCKET_PATH=\"/run/redis/redis.sock\" -D_BSD_SOURCE -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include  -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1  -m64 -mtune=generic -g -Wall -Wextra -Werror    -std=gnu99 -o CMakeFiles/util-test.dir/util_tests.c.o   -c /builddir/build/BUILD/gvm-libs-20.8.1/boreas/util_tests.c
> /builddir/build/BUILD/gvm-libs-20.8.1/boreas/util_tests.c: In function 'util__set_all_needed_sockets':
> /builddir/build/BUILD/gvm-libs-20.8.1/boreas/util_tests.c:78:10: error: missing initializer for field 'tcpv4soc' of 'struct scanner' [-Werror=missing-field-initializers]
>    struct scanner scanner = {};
>           ^
> In file included from /builddir/build/BUILD/gvm-libs-20.8.1/boreas/util.h:23:0,
>                  from /builddir/build/BUILD/gvm-libs-20.8.1/boreas/util.c:20,
>                  from /builddir/build/BUILD/gvm-libs-20.8.1/boreas/util_tests.c:20:
> /builddir/build/BUILD/gvm-libs-20.8.1/boreas/alivedetection.h:58:7: note: 'tcpv4soc' declared here
>    int tcpv4soc;
>        ^
> cc1: all warnings being treated as errors

OS: CentOS7

Unable to compile gvm-libs 10.0.2 on CentOS 7

I'm unable to install GVM libraries on CentOS 7.8 due to zlib version issue.

[root@openvas gvm-libs-10.0.2]# cmake3 .
-- Configuring the Greenbone Vulnerability Management Libraries...
-- Looking for clang-format...
-- clang-format not found...
-- Install prefix: /usr/local
-- Checking for module 'zlib>=1.2.8'
-- Requested 'zlib >= 1.2.8' but version of zlib is 1.2.7
CMake Error at /usr/share/cmake3/Modules/FindPkgConfig.cmake:497 (message):
A required package was not found
Call Stack (most recent call first):
/usr/share/cmake3/Modules/FindPkgConfig.cmake:681 (_pkg_check_modules_internal)
util/CMakeLists.txt:33 (pkg_check_modules)

-- Configuring incomplete, errors occurred!
See also "/root/gvm-libs-10.0.2/CMakeFiles/CMakeOutput.log".

Hence I downloaded zlib-1.2.11 and compiled manually and installed below path
/usr/src/zlib-1.2.11

still I'm getting above message. Kindly help on this.

‘struct _gpgme_key’ has no member named ‘fpr’

Linnux Mint 18.1 serena

library build fails with the following:

/home/build-tools/gvm-libs/util/gpgmeutils.c: In function ‘create_all_certificates_trustlist’:
/home/build-tools/gvm-libs/util/gpgmeutils.c:437:63: error: ‘struct _gpgme_key’ has no member named ‘fpr’
g_string_append_printf (trustlist_content, "%s S\n", key->fpr);
^
util/CMakeFiles/gvm_util_shared.dir/build.make:134: recipe for target 'util/CMakeFiles/gvm_util_shared.dir/gpgmeutils.c.o' failed
make[2]: *** [util/CMakeFiles/gvm_util_shared.dir/gpgmeutils.c.o] Error 1
CMakeFiles/Makefile2:140: recipe for target 'util/CMakeFiles/gvm_util_shared.dir/all' failed
make[1]: *** [util/CMakeFiles/gvm_util_shared.dir/all] Error 2
Makefile:160: recipe for target 'all' failed
make: *** [all] Error 2

LDAPS connection problem. jira: T4-398

gvm-libs version: main branch
system: Debian Bullseye (with OpenLDAP 2.4.57+dfsg-3+deb11u1)

LDAP authentication using LDAPS is not possible, causing an error:

LDAP anonymous authentication failure: Protocol error

This is caused by another initialization of LDAP handler (after StartTLS). After the initialization LDAP version is set back to 2 (that is not supported on the server in my case). GDB script that was used to find the cause:

set pagination off

break /g/util/ldaputils.c:298
break /g/util/ldaputils.c:300
break /g/util/ldaputils.c:308

set follow-fork-mode child
continue
print (*ldap->ldc).ldc_options.ldo_version
continue
print (*ldap->ldc).ldc_options.ldo_version
continue
print (*ldap->ldc).ldc_options.ldo_version
continue
quit

GDB output:

Breakpoint 1 at 0x7f04c22ff361: file /g/util/ldaputils.c, line 299.                                                                                
Breakpoint 2 at 0x7f04c22ff37a: file /g/util/ldaputils.c, line 300.                                                                                
Breakpoint 3 at 0x7f04c22ff3e7: file /g/util/ldaputils.c, line 308.                                                                                
[Attaching after Thread 0x7f04beb95ac0 (LWP 1590690) fork to child process 1610197]                                                                
[New inferior 2 (process 1610197)]                                                                                                                 
[Detaching after fork from parent process 1590690]                                                                                                 
[Inferior 1 (process 1590690) detached]                                                                                                            
[Thread debugging using libthread_db enabled]                                                                                                      
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".                                                                         
[New Thread 0x7f04be6ba700 (LWP 1610198)]                                                                                                          
[Switching to Thread 0x7f04beb95ac0 (LWP 1610197)]                                                                                                 
                                                                                                                                                   
Thread 2.1 "gvmd" hit Breakpoint 1, ldap_auth_bind (host=0x55a909de1210 "ADDRESS_REDACTED", userdn=0x55a909dd68e0 "BIND_DN_REDACTED", password=0x55a9180da450 "PASSWORD_REDACTED", force_encryption=1, cacert=0x55a909dee370 "CERTIFICATE_REDACTED"...) at /g/util/ldaputils.c:299
warning: Source file is more recent than executable.                                                                                               
299       ldap_return = ldap_start_tls_s (ldap, NULL, NULL);                                                                                       
$1 = 3                                                                                                                                             
                                                                                                                                                   
Thread 2.1 "gvmd" hit Breakpoint 2, ldap_auth_bind (host=0x55a909de1210 "ADDRESS_REDACTED", userdn=0x55a909dd68e0 "BIND_DN_REDACTED", password=0x55a9180da450 "PASSWORD_REDACTED", force_encryption=1, cacert=0x55a909dee370 "CERTIFICATE_REDACTED"...) at /g/util/ldaputils.c:300
300       if (ldap_return != LDAP_SUCCESS)                                                                                                         
$2 = 3                                                                                                                                             
                                                                                                                                                   
Thread 2.1 "gvmd" hit Breakpoint 3, ldap_auth_bind (host=0x55a909de1210 "ADDRESS_REDACTED", userdn=0x55a909dd68e0 "BIND_DN_REDACTED", password=0x55a9180da450 "PASSWORD_REDACTED", force_encryption=1, cacert=0x55a909dee370 "CERTIFICATE_REDACTED"...) at /g/util/ldaputils.c:308
308           if (ldap == NULL || ldap_return != LDAP_SUCCESS)                                                                                     
$3 = 2

This can be fixed in the code by the following change:

diff --git a/util/ldaputils.c b/util/ldaputils.c
index a361957c..fbcc1c43 100644
--- a/util/ldaputils.c
+++ b/util/ldaputils.c
@@ -333,8 +333,29 @@ ldap_auth_bind (const gchar *host, const gchar *userdn, const gchar *password,
                   g_free (ldapuri);
                   goto fail;
                 }
+             // Set LDAP version to 3 after initialization
+              ldap_return = ldap_set_option (ldap, LDAP_OPT_PROTOCOL_VERSION, &ldapv3);
+              if (ldap_return != LDAP_SUCCESS)
+                {
+                  g_warning ("Aborting, could not set ldap protocol version to 3: %s.",
+                             ldap_err2string (ldap_return));
+                  g_free (ldapuri);
+                  goto fail;
+                }
             }
         }
+      else
+        {
+         // Set LDAP version to 3 after initialization
+          ldap_return = ldap_set_option (ldap, LDAP_OPT_PROTOCOL_VERSION, &ldapv3);
+          if (ldap_return != LDAP_SUCCESS)
+            {
+              g_warning ("Aborting, could not set ldap protocol version to 3: %s.",
+                         ldap_err2string (ldap_return));
+              g_free (ldapuri);
+              goto fail;
+            }
+       }
     }
   else
     g_debug ("LDAP StartTLS initialized.");

Where do I find the password?

Hi, I'm attempting to setup gvm on a kali vm.

I found https://linuxhint.com/install-openvas-kali-linux/ tutorail and followed it as well as I could.

The setup here basically consists of just running:

 $ sudo apt-get install openvas
$ sudo gvm-setup

and then run by typing sudo gvm-start.
In the tutorial, it says that my password will be generated while running the setup command. But I really can't find anything in the output.

My output looks like this (I have excluded the part that is just files):

I've been trying to look through the manpage for hints on how to change the password.. I found the command

sudo gvmd --new-password=pw

To which it says user required. But I don't understand where I should input a username, or from where I should know what my username is?

Upload public key for the signature

Hi,
I can't find your public GPG key on any keyserver, the public key is also not available under https://github.com/greenbone.gpg . Would be nice if you could upload it somewhere. Otherwise I can't verify your signature.

"optional" mqtt support in 'main' does not appear to be optional

The mqtt support is listed as optional in the INSTALLmd, but I can't seem to find a way to build gvm-libs without it.

Expected behavior

Able to not build 'optional' components.

Actual behavior

Builds fail with out the dependency and the dependency is not easily located or part of the stated build environment for the rest of GVM.

Steps to reproduce

Libgcrypt warning: missing initialization during start of openvas-nasl

When starting openvas-nasl, an warning will logged.

openvas-nasl[24072]: Libgcrypt warning: missing initialization - please fix the application
Version: 9.0.1
command:

OPENVAS_GPGHOME=/var/lib/openvas/gnupg openvas-nasl -p $(pwd)/ssh_proto_version.nasl

[9.0.2] build fails while unknown symbol

/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function 'nasl_aes128_gcm_encrypt':
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1572:51: error: 'GCRY_CIPHER_MODE_GCM' undeclared (first use in this function)
return encrypt_data (lexic, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_GCM);
^
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1572:51: note: each undeclared identifier is reported only once for each function it appears in
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function 'nasl_aes256_gcm_encrypt':
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1578:51: error: 'GCRY_CIPHER_MODE_GCM' undeclared (first use in this function)
return encrypt_data (lexic, GCRY_CIPHER_AES256, GCRY_CIPHER_MODE_GCM);
^
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function 'nasl_aes128_gcm_encrypt':
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1573:1: error: control reaches end of non-void function [-Werror=return-type]
}
^
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function 'nasl_aes256_gcm_encrypt':
/builddir/build/BUILD/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1579:1: error: control reaches end of non-void function [-Werror=return-type]
}
^
cc1: all warnings being treated as errors
make[2]: *** [nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_crypto2.c.o] Error 1

For the full build log, see the attachments.

build.log
hw_info.log
installed_pkgs.log
root.log
state.log

"Could not find a package configuration file provided by "cgreen"" when `-DBUILD_TESTS=ON` is used

Expected behavior

I enabled tests, with the cmake option. However, these tests don't seem to be able to function due to missing files. I expected cmake to find these files. cgreen1 is installed on Debian Bullseye (11).

Actual behavior

It fails with the error below.

-- Install prefix: /usr/local                                                                                                                                                                  
-- Tests enabled.                                                                                                                                                                              
CMake Error at CMakeLists.txt:227 (find_package):                                                                                                                                              
  By not providing "Findcgreen.cmake" in CMAKE_MODULE_PATH this project has                                                                                                                    
  asked CMake to find a package configuration file provided by "cgreen", but                                                                                                                   
  CMake did not find one.                                                                                                                                                                      
                                                                                                                                                                                               
  Could not find a package configuration file provided by "cgreen" with any                                                                                                                    
  of the following names:                                                                                                                                                                      
                                                                                                                                                                                               
    cgreenConfig.cmake                                                                                                                                                                         
    cgreen-config.cmake          
                                               
  Add the installation prefix of "cgreen" to CMAKE_PREFIX_PATH or set
  "cgreen_DIR" to a directory containing one of the above files.  If "cgreen"                  
  provides a separate development package or SDK, be sure it has been                          
  installed.                                   
                                                                                               
                                                                                               
-- Configuring incomplete, errors occurred!                                                    
See also "/root/sources/gvm-libs-21.4.3/build/CMakeFiles/CMakeOutput.log".

Steps to reproduce

Follow the installation steps
Add the following to the CMake command: cmake -DBUILD_TESTS=ON ..

GVM versions

gvm-libs: 21.4.3

Environment

Operating system: Debian Bullseye

Installation method / source: source installation

gvm-libs vulnerability

Hi, this week i get this CRITICAL vulnerability. It is bug? How to fix?

Expected behavior

Actual behavior

Steps to reproduce

Run scan

GVM versions

gsa: Greenbone Security Assistant 9.0.0~git-55b674481-gsa-9.0

gvm: Greenbone Vulnerability Manager 9.0.1~git-3e3d2350-gvmd-9.0

openvas: OpenVAS 7.0.0

gvm-libs: gvm-libs 11.0.1

Environment

Operating system:
Linux 4.19.0-9-amd64 #1 SMP Debian 4.19.118-2+deb10u1 (2020-06-07) x86_64 GNU/Linux

Installation method / source: source installation

Logfiles

Cmake fails for Gvm-libs

Hi, I'm trying to create a Dockerfile which will install GVM10 from its source code. I'm using alpine 3.10 as base image. I'm following the install.md for each component.

Expected behavior

cmake with success in the folder where I unzipped the source code of gvm-libs and go to the next stop which will be make and make install.

Current behavior

Warnings stops with error and abort the process.

Steps to reproduce

Dockerfile with base image alpine:3.10
install dependencies
wget the source code in this case for the gvm-libs.
unzip
create a new folder and cd in it.
cmake ..

GVM versions

gsa: (gsad --version)
8.0.1
gvm: (gvmd --version)
8.0.1
openvas-scanner: (openvassd --version)
6.0.1
gvm-libs:
10.0.1
openvas-smb:
1.0.5

Environent

Operating system:
Linux Alpine
Installation method / source: (packages, source installation)
From source code https://community.greenbone.net/t/gvm-10-old-stable-initial-release-2019-04-05/208

Logfiles

[100%] Building documentation...
[100%] Built target doc-full
[  2%] Building C object base/CMakeFiles/gvm_base_shared.dir/hosts.c.o
/root/gvm-libs-10.0.1/base/hosts.c: In function 'gvm_hosts_deduplicate':
/root/gvm-libs-10.0.1/base/hosts.c:1016:3: error: implicit declaration of function 'malloc_trim'; did you mean 'malloc'? [-Werror=implicit-function-declaration]
   malloc_trim (0);
   ^~~~~~~~~~~
   malloc
cc1: all warnings being treated as errors
make[2]: *** [base/CMakeFiles/gvm_base_shared.dir/build.make:115: base/CMakeFiles/gvm_base_shared.dir/hosts.c.o] Error 1
make[1]: *** [CMakeFiles/Makefile2:123: base/CMakeFiles/gvm_base_shared.dir/all] Error 2

Any try to start a task from webui leads to message "Service temporarily down"

Expected behavior

Start Task

Current behavior

Task not started. Message: Service temporarily down.

Steps to reproduce

Check out github sources "master" branch
Compile and Install
Create Targets and Tasks. Start a task.

GVM versions

gsa                                       v8.0+beta1-2317-g408ca2687
gvm                                       v8.0+beta1-319-gfdf0bf0c
gvm-libs                                  v1.0+beta1-78-gc939d92e
gvm-tools                                 v1.4.1-239-gbb98ebd
openvas-scanner                           v6.0+beta1-319-ge0d8148
openvas-smb                               v1.0.4-2-g564d5a0
ospd                                      v1.3.0-140-gca45bbe
ospd-debsecan                             f46c3aa
ospd-ikeprobe                             66b1eb1
ospd-ikescan                              5f2553b
ospd-netstat                              4f0f578
ospd-nmap                                 71248b4
ospd-nmap-nse                             01afe7f
ospd-openvas                              9b96df9

node: v10.12.0

redis-server: Redis server v=5.0.0 sha=00000000:0 malloc=jemalloc-3.6.0 bits=64 build=faf382d3bcf11653

gvmd: Greenbone Vulnerability Manager 8.0+beta1
GIT revision fdf0bf0c-master
Manager DB revision 196
Copyright (C) 2010-2017 Greenbone Networks GmbH
License GPLv2+: GNU GPL version 2 or later
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

openvassd: OpenVAS Scanner 6.0+beta2
GIT revision e0d8148-master
Most new code since 2005: (C) 2018 Greenbone Networks GmbH
Nessus origin: (C) 2004 Renaud Deraison [email protected]
License GPLv2: GNU GPL version 2
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Oops, secure memory pool already initialized
gsad: Greenbone Security Assistant 8.0+beta2
GIT revision 408ca2687-master
Copyright (C) 2010-2016 Greenbone Networks GmbH
License GPLv2+: GNU GPL version 2 or later
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Environment

Operating system:
Debian testing

Installation method / source:
git checkout

Logfiles

md   main:MESSAGE:2018-11-05 14h11.41 utc:94656:    Greenbone Vulnerability Manager version 8.0+beta1 (GIT revision fdf0bf0c-master) (DB revision 196)
md manage:WARNING:2018-11-05 14h11.41 utc:94656: database must be initialised from scanner
util gpgme:MESSAGE:2018-11-05 14h11.41 utc:94656: Setting GnuPG dir to '/usr/local/var/lib/gvm/gvmd/gnupg'
util gpgme:MESSAGE:2018-11-05 14h11.42 utc:94656: Using OpenPGP engine version '2.2.10'
event task:MESSAGE:2018-11-05 14h12.04 UTC:94703: Task nc158-muc (LOC) (ccc77ac0-a900-46bc-a776-3194386aba18) could not be started by user

gvm-libs-22.4.0 fails to build without paho-mqtt

Basically this has already been reported in the past #632 but not addressed, configure succeeds

[...]
-- Looking for paho-mqtt3c ... LIBPAHO-NOTFOUND
-- libpaho-mqtt3c is required for MQTTv5 support.
[...]

but build fails with:

[...]
[ 56%] Building C object util/CMakeFiles/gvm_util_shared.dir/mqtt.c.o
cd /var/tmp/paludis/build/net-analyzer-gvm-libs-22.4.0/work/build/util && /usr/bin/x86_64-pc-linux-gnu-cc -DGVM_LIBS_VERSION=\"22.4.0\" -DREDIS_SOCKET_PATH=\"/tmp/redis.sock\" -Dgvm_util_shared_EXPORTS -I/usr/x86_64-pc-linux-gnu/include/glib-2.0 -I/usr/x86_64-pc-linux-gnu/lib/glib-2.0/include -I/usr/x86_64-pc-linux-gnu/include/libxml2 -march=native -O2 -pipe      -std=c11     -Wall     -Wextra     -Werror     -Wpedantic     -Wmissing-prototypes     -Wshadow     -Wsequence-point     -D_ISOC11_SOURCE     -D_DEFAULT_SOURCE -D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1 -O3 -DNDEBUG -Wformat -Wformat-security -D_FORTIFY_SOURCE=2 -fstack-protector -fPIC -std=gnu11 -MD -MT util/CMakeFiles/gvm_util_shared.dir/mqtt.c.o -MF CMakeFiles/gvm_util_shared.dir/mqtt.c.o.d -o CMakeFiles/gvm_util_shared.dir/mqtt.c.o -c /var/tmp/paludis/build/net-analyzer-gvm-libs-22.4.0/work/gvm-libs-22.4.0/util/mqtt.c
make[2]: Leaving directory '/var/tmp/paludis/build/net-analyzer-gvm-libs-22.4.0/work/build'
make[1]: Leaving directory '/var/tmp/paludis/build/net-analyzer-gvm-libs-22.4.0/work/build'
In file included from /var/tmp/paludis/build/net-analyzer-gvm-libs-22.4.0/work/gvm-libs-22.4.0/util/mqtt.c:41:
/var/tmp/paludis/build/net-analyzer-gvm-libs-22.4.0/work/gvm-libs-22.4.0/util/mqtt.h:28:10: fatal error: MQTTClient.h: No such file or directory
   28 | #include <MQTTClient.h>
      |          ^~~~~~~~~~~~~~
compilation terminated.
[...]

Expected behavior

Allow to build without optional mqtt support

Actual behavior

mqtt support contrary to the commen in the CMakeLists.txt https://github.com/greenbone/gvm-libs/blob/stable/util/CMakeLists.txt#L54 is not optional.

Steps to reproduce

download gvm-libs-22.4.0.tar.gz
try to build
see error

GVM versions

gvm-libs: -

Environment

Operating system:

Exherbo Linux

Installation method / source: source-based "packages"

Logfiles

complete build log:
gvm-libs-22.4.0.log

[20.8.1] Build fails uisng gcc 9.3.1

When I try to build the lib using gcc 9.3.1 then the build fails with:

make[2]: Leaving directory /builddir/build/BUILD/gvm-libs-20.8.1' [ 90%] Built target gvm_boreas_shared In file included from /usr/include/string.h:638, from /usr/include/glib-2.0/glib/gtestutils.h:30, from /usr/include/glib-2.0/glib.h:82, from /builddir/build/BUILD/gvm-libs-20.8.1/base/settings.h:30, from /builddir/build/BUILD/gvm-libs-20.8.1/base/prefs.c:28: In function 'strncpy', inlined from 'prefs_config' at /builddir/build/BUILD/gvm-libs-20.8.1/base/prefs.c:155:3: /usr/include/bits/string3.h:120:10: error: '__builtin_strncpy' specified bound 2048 equals destination size [-Werror=stringop-truncation] 120 | return __builtin___strncpy_chk (__dest, __src, __len, __bos (__dest)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors make[2]: *** [base/CMakeFiles/gvm_base_shared.dir/prefs.c.o] Error 1 make[2]: Leaving directory /builddir/build/BUILD/gvm-libs-20.8.1'
make[1]: *** [base/CMakeFiles/gvm_base_shared.dir/all] Error 2
make[1]: *** Waiting for unfinished jobs....
In file included from /usr/include/string.h:638,
from /usr/include/glib-2.0/glib/gtestutils.h:30,
from /usr/include/glib-2.0/glib.h:82,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/../base/nvti.h:30,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.h:28,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:27:
In function 'strncpy',
inlined from 'redis_direct_conn' at /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:429:3:
/usr/include/bits/string3.h:120:10: error: '__builtin_strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Werror=stringop-truncation]
120 | return __builtin___strncpy_chk (__dest, __src, __len, __bos (__dest));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c: In function 'redis_direct_conn':
/builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:429:3: note: length computed here
429 | strncpy (kbr->path, kb_path, strlen (kb_path));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from /usr/include/string.h:638,
from /usr/include/glib-2.0/glib/gtestutils.h:30,
from /usr/include/glib-2.0/glib.h:82,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/../base/nvti.h:30,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.h:28,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:27:
In function 'strncpy',
inlined from 'redis_new' at /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:396:3:
/usr/include/bits/string3.h:120:10: error: '__builtin_strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Werror=stringop-truncation]
120 | return __builtin___strncpy_chk (__dest, __src, __len, __bos (__dest));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c: In function 'redis_new':
/builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:396:3: note: length computed here
396 | strncpy (kbr->path, kb_path, strlen (kb_path));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from /usr/include/string.h:638,
from /usr/include/glib-2.0/glib/gtestutils.h:30,
from /usr/include/glib-2.0/glib.h:82,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/../base/nvti.h:30,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.h:28,
from /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:27:
In function 'strncpy',
inlined from 'redis_find' at /builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:471:3:
/usr/include/bits/string3.h:120:10: error: '__builtin_strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Werror=stringop-truncation]
120 | return __builtin___strncpy_chk (__dest, __src, __len, __bos (__dest));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c: In function 'redis_find':
/builddir/build/BUILD/gvm-libs-20.8.1/util/kb.c:471:3: note: length computed here
471 | strncpy (kbr->path, kb_path, strlen (kb_path));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
make[2]: Leaving directory /builddir/build/BUILD/gvm-libs-20.8.1' make[1]: Leaving directory /builddir/build/BUILD/gvm-libs-20.8.1'

OS: CentOS7

[20.8.0] unable to build the lib, during mising defines

OS: CentOS 7.8

Error first:

/builddir/build/BUILD/gvm-libs-20.8.0/boreas/alivedetection.c: In function 'scan':
/builddir/build/BUILD/gvm-libs-20.8.0/boreas/alivedetection.c:102:26: error: 'TH_SYN' undeclared (first use in this function)
       scanner.tcp_flag = TH_SYN; /* SYN */
                          ^
/builddir/build/BUILD/gvm-libs-20.8.0/boreas/alivedetection.c:102:26: note: each undeclared identifier is reported only once for each function it appears in
/builddir/build/BUILD/gvm-libs-20.8.0/boreas/alivedetection.c:110:26: error: 'TH_ACK' undeclared (first use in this function)
       scanner.tcp_flag = TH_ACK; /* ACK */
                          ^
make[2]: *** [boreas/CMakeFiles/gvm_boreas_shared.dir/alivedetection.c.o] Error 1
make[2]: Leaving directory `/builddir/build/BUILD/gvm-libs-20.8.0'
make[1]: *** [boreas/CMakeFiles/gvm_boreas_shared.dir/all] Error 2

Error second:

builddir/build/BUILD/gvm-libs-20.8.0/base/networking.c: In function 'ip_islocalhost':
/builddir/build/BUILD/gvm-libs-20.8.0/base/networking.c:841:18: error: 'addr.s_addr' may be used uninitialized in this function [-Werror=maybe-uninitialized]
               if (addr_p->s_addr == sin->sin_addr.s_addr)
                  ^
cc1: all warnings being treated as errors
make[2]: *** [base/CMakeFiles/gvm_base_shared.dir/networking.c.o] Error 1

[9.0.2] cmake don't configure gpgme correct when not in default path

When using an static version of gpgme, then cmake don't set the needed include/lib path.
Setting the path to the lib via the -DCMAKE_LIBRARY_PATH:PATH will allow cmake to detect the lib,
but the include and linker options are not added. So the build process fails:

-- Looking for gpgme...
-- Looking for gpgme... /builddir/build/BUILDROOT/openvas-libraries-9.0.2-1.el7.x86_64/helper/usr/lib64/libgpgme.a

....

[ 15%] Building C object base/CMakeFiles/openvas_base_shared.dir/gpgme_util.c.o
cd /builddir/build/BUILD/gvm-libs-9.0.2/base && /usr/lib64/ccache/cc -Dopenvas_base_shared_EXPORTS -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/hiredis -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic -Wformat -Wformat-security -O2 -D_FORTIFY_SOURCE=2 -fstack-protector -D_FILE_OFFSET_BITS=64 -Wall -Wextra -fPIC -g -Werror -fPIC -DOPENVASSD_CONF="/etc/openvas/openvassd.conf" -DOPENVAS_SYSCONF_DIR="/etc/openvas" -DOPENVAS_STATE_DIR="/var/lib/openvas" -DOPENVAS_PID_DIR="/var/run" -o CMakeFiles/openvas_base_shared.dir/gpgme_util.c.o -c /builddir/build/BUILD/gvm-libs-9.0.2/base/gpgme_util.c
In file included from /builddir/build/BUILD/gvm-libs-9.0.2/base/gpgme_util.c:41:0:
/builddir/build/BUILD/gvm-libs-9.0.2/base/gpgme_util.h:36:19: fatal error: gpgme.h: No such file or directory
#include <gpgme.h>

gpgme-config --libs:

-L/builddir/build/BUILDROOT/openvas-libraries-9.0.2-1.el7.x86_64/helper/usr/lib64 -lgpgme -lassuan -lgpg-error

gpgme-config --cflags:

-I/builddir/build/BUILDROOT/openvas-libraries-9.0.2-1.el7.x86_64/helper/usr/include

The whole gpgme-config stuff is missing in the compile command.
And the right gpgme-config tool will be used:
which gpgme-config:

/builddir/build/BUILDROOT/openvas-libraries-9.0.2-1.el7.x86_64/helper/usr/bin/gpgme-config

g_memdup has been deprecated since glib version 2.68

g_memdup has been deprecated since glib version 2.68. Use g_memdup2 instead.

3 instances of g_memdup in gvm-libs:

/opt/gvm/src/gvm-libs/base/networking.c on lines 368 and 374

/opt/gvm/src/gvm-libs/util/kb.c on line 634

Signature key not available anymore

In your documentation, a GPG key is mentioned: https://www.greenbone.net/GBCommunitySigningKey.asc
This file is not available anymore. Building GVM now fails in my container: https://github.com/AquaL1te/gvm/blob/main/Dockerfile

Please restore the GPG key, or update your documentation with the new URL that points to this key. Thank you.

missing -lgnutls

Hi,

I'm trying to compile gvm from sources and facing the following error:

'''
md main:MESSAGE:2019-10-13 14h38.24 utc:26507: Greenbone Vulnerability Manager version 9.0.0~git (DB revision 221)
md manage:WARNING:2019-10-13 14h38.24 utc:26514: sql_exec_internal: PQexec failed: ERROR: could not load library "/usr/lib64/libgvm-pg-server.so": /usr/lib64/libgvm_util.so.11: undefined symbol: gnutls_x509_privkey_import
(7)
md manage:WARNING:2019-10-13 14h38.24 utc:26514: sql_exec_internal: SQL: CREATE OR REPLACE FUNCTION hosts_contains (text, text) RETURNS boolean AS '/usr/lib64/libgvm-pg-server', 'sql_hosts_contains' LANGUAGE C IMMUTABLE;
md manage:WARNING:2019-10-13 14h38.24 utc:26514: sqlv: sql_exec_internal failed
'''

The CMakefiles.txt seems missing linking gnutls in both static and dynamic sections

[9.0.3] openvas-smb version check fail, will not break cmake

In the release notes version 1.0.4 of it are noted as minimum.
But using an old one will not let cmake fails:

-- Checking for module 'libopenvas_wmiclient>=1.0.4'
-- Requested 'libopenvas_wmiclient >= 1.0.4' but version of openvas-wmiclient is 1.0.3
-- Checking for module 'libopenvas_wincmd>=1.0.4'
-- Requested 'libopenvas_wincmd >= 1.0.4' but version of openvas-wmiclient is 1.0.3

[11.0.0] test fails

The build test of 11.0.0 fails:
ctest3 -V -j8:

UpdateCTestConfiguration  from :/builddir/build/BUILD/gvm-libs-11.0.0/DartConfiguration.tcl
UpdateCTestConfiguration  from :/builddir/build/BUILD/gvm-libs-11.0.0/DartConfiguration.tcl
Test project /builddir/build/BUILD/gvm-libs-11.0.0
Constructing a list of tests
Done constructing a list of tests
Updating test list for fixtures
Added 0 tests to meet fixture requirements
Checking test dependency graph...
Checking test dependency graph end
test 1
    Start 1: testhosts

1: Test command: /builddir/build/BUILD/gvm-libs-11.0.0/tests/test-hosts "localhost"
1: Test timeout computed to be: 10000000
test 2
    Start 2: array-test
Could not find executable array-test
Looked in the following places:
array-test
array-test
Release/array-test
Release/array-test
Debug/array-test
Debug/array-test
MinSizeRel/array-test
MinSizeRel/array-test
RelWithDebInfo/array-test
RelWithDebInfo/array-test
Deployment/array-test
Deployment/array-test
Development/array-test
Development/array-test

2: Test command: 
Unable to find executable: array-test
1/2 Test #2: array-test .......................***Not Run   0.00 sec
1: Count: 2
1: Removed: 1
1: #1 IPv4 127.0.0.1
1:  view-localhost [Reverse-DNS] localhost [Forward-DNS]
1: #2 IPv6 ::1
1:  localhost [Forward-DNS]
2/2 Test #1: testhosts ........................   Passed    0.00 sec

50% tests passed, 1 tests failed out of 2

Total Test time (real) =   0.00 sec

The following tests FAILED:
	  2 - array-test (Not Run)
Errors while running CTest

On 10.0.1 the test will work. And there is no hint in the Changelog about any test changes.

gym-libs compile fails on debian

Expected behavior

make install to complete compile from cloned .git

Current behavior

Cmake .. completes without errors, but make install fails, with "No such file or directory" message:

root@OpenVAS:~/gvm-libs/build# cmake ..
-- Configuring the Greenbone Vulnerability Management Libraries...
-- Looking for clang-format...
-- Looking for clang-format... /usr/bin/clang-format
-- Install prefix: /usr/local
-- Checking for module 'hiredis>=0.10.1'

-- Looking for gpgme...
-- Found gpgme: /usr/lib/x86_64-linux-gnu/libgpgme.so, version 1.8.0
-- Looking for libgcrypt...
-- Looking for libgcrypt... /usr/lib/x86_64-linux-gnu/libgcrypt.so
-- Looking for libldap...
-- Found /usr/lib/x86_64-linux-gnu/libldap.so - ldap support enabled
-- Configuring done
-- Generating done
-- Build files have been written to: /root/gvm-libs/build

root@OpenVAS:~/gvm-libs/build# make install
[ 44%] Built target gvm_base_shared
[ 47%] Building C object util/CMakeFiles/gvm_util_shared.dir/kb.c.o
/root/gvm-libs/util/kb.c:31:81: fatal error: hiredis/hiredis.h: No such file or directory
#include <hiredis/hiredis.h> /* for redisReply, freeReplyObject, redisCommand */
^
compilation terminated.
util/CMakeFiles/gvm_util_shared.dir/build.make:158: recipe for target 'util/CMakeFiles/gvm_util_shared.dir/kb.c.o' failed
make[2]: *** [util/CMakeFiles/gvm_util_shared.dir/kb.c.o] Error 1
CMakeFiles/Makefile2:172: recipe for target 'util/CMakeFiles/gvm_util_shared.dir/all' failed
make[1]: *** [util/CMakeFiles/gvm_util_shared.dir/all] Error 2
Makefile:160: recipe for target 'all' failed
make: *** [all] Error 2

Steps to reproduce

clone .git
Run cmake ..
run make install

GVM versions

gsa: (gsad --version)

gvm: (gvmd --version)

openvas-scanner: (openvassd --version)

gvm-libs:

openvas-smb:

Environment

Operating system:
Debian
Installation method / source: (packages, source installation)
git clone.

Logfiles

Clone pull not working for Ubuntu 20.04

I am seeing the steps to clone the respository on every installation guide that leads back to hear but cannot get it to complete. I have put my commands (those suggested) and the error message.

gvm@ip:/opt/gvm/src$ git clone -b gvm-libs-20.08 --single-branch https://github.com/greenbone/gvm-libs.git &&\

git clone -b openvas-20.08 --single-branch https://github.com/greenbone/openvas.git &&
git clone -b gvmd-20.08 --single-branch https://github.com/greenbone/gvmd.git &&
git clone -b master --single-branch https://github.com/greenbone/openvas-smb.git &&
git clone -b gsa-20.08 --single-branch https://github.com/greenbone/gsa.git &&
git clone -b ospd-openvas-20.08 --single-branch https://github.com/greenbone/ospd-openvas.git &&
git clone -b ospd-20.08 --single-branch https://github.com/greenbone/ospd.git
Cloning into 'gvm-libs'...
warning: Could not find remote branch gvm-libs-20.08 to clone.
fatal: Remote branch gvm-libs-20.08 not found in upstream origin

GCC: ‘g_memdup’ is deprecated: Use 'g_memdup2' instead [-Werror=deprecated-declarations]

Expected behavior

Install using main

Actual behavior

failing because of Werror:

$ make
Scanning dependencies of target gvm_base_shared
[  2%] Building C object base/CMakeFiles/gvm_base_shared.dir/array.c.o
[  4%] Building C object base/CMakeFiles/gvm_base_shared.dir/credentials.c.o
[  6%] Building C object base/CMakeFiles/gvm_base_shared.dir/cvss.c.o
[  9%] Building C object base/CMakeFiles/gvm_base_shared.dir/drop_privileges.c.o
[ 11%] Building C object base/CMakeFiles/gvm_base_shared.dir/hosts.c.o
[ 13%] Building C object base/CMakeFiles/gvm_base_shared.dir/logging.c.o
[ 16%] Building C object base/CMakeFiles/gvm_base_shared.dir/networking.c.o
/home/jloechte/greenbone/gvm-libs/base/networking.c: In function ‘gvm_resolve_list’:
/home/jloechte/greenbone/gvm-libs/base/networking.c:368:11: error: ‘g_memdup’ is deprecated: Use 'g_memdup2' instead [-Werror=deprecated-declarations]
  368 |           list = g_slist_prepend (list, g_memdup (&dst, sizeof (dst)));
      |           ^~~~
In file included from /usr/include/glib-2.0/glib.h:82,
                 from /home/jloechte/greenbone/gvm-libs/base/array.h:28,
                 from /home/jloechte/greenbone/gvm-libs/base/networking.h:28,
                 from /home/jloechte/greenbone/gvm-libs/base/networking.c:25:
/usr/include/glib-2.0/glib/gstrfuncs.h:257:23: note: declared here
  257 | gpointer              g_memdup         (gconstpointer mem,
      |                       ^~~~~~~~
/home/jloechte/greenbone/gvm-libs/base/networking.c:374:11: error: ‘g_memdup’ is deprecated: Use 'g_memdup2' instead [-Werror=deprecated-declarations]
  374 |           list = g_slist_prepend (list, g_memdup (&dst, sizeof (dst)));
      |           ^~~~
In file included from /usr/include/glib-2.0/glib.h:82,
                 from /home/jloechte/greenbone/gvm-libs/base/array.h:28,
                 from /home/jloechte/greenbone/gvm-libs/base/networking.h:28,
                 from /home/jloechte/greenbone/gvm-libs/base/networking.c:25:
/usr/include/glib-2.0/glib/gstrfuncs.h:257:23: note: declared here
  257 | gpointer              g_memdup         (gconstpointer mem,
      |                       ^~~~~~~~
cc1: all warnings being treated as errors
make[2]: *** [base/CMakeFiles/gvm_base_shared.dir/build.make:160: base/CMakeFiles/gvm_base_shared.dir/networking.c.o] Error 1
make[1]: *** [CMakeFiles/Makefile2:225: base/CMakeFiles/gvm_base_shared.dir/all] Error 2
make: *** [Makefile:171: all] Error 2

Steps to reproduce

git clone [email protected]:greenbone/gvm-libs.git
mkdir build && cd build && cmake ..

$ cmake ..
-- Configuring the Greenbone Vulnerability Management Libraries...
-- The C compiler identification is GNU 10.3.0
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Found Git: /usr/bin/git (found version "2.30.2") 
-- Looking for clang-format...
-- clang-format not found...
-- Using redis socket /run/redis/redis.sock
-- Install prefix: /usr/local
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29.2") 
-- Checking for module 'glib-2.0>=2.42'
--   Found glib-2.0, version 2.68.1
-- Looking for libnet...
-- Looking for net... /usr/lib/x86_64-linux-gnu/libnet.so
-- Looking for libnet-config...
-- Looking for libnet-config... /usr/bin/libnet-config
-- Looking for pcap...
-- Looking for pcap... /usr/lib/x86_64-linux-gnu/libpcap.so
-- Looking for pcap-config...
-- Looking for pcap-config... /usr/bin/pcap-config
-- Looking for pthread.h
-- Looking for pthread.h - found
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD
-- Performing Test CMAKE_HAVE_LIBC_PTHREAD - Failed
-- Looking for pthread_create in pthreads
-- Looking for pthread_create in pthreads - not found
-- Looking for pthread_create in pthread
-- Looking for pthread_create in pthread - found
-- Found Threads: TRUE  
-- Checking for module 'zlib>=1.2.8'
--   Found zlib, version 1.2.11
-- Checking for module 'gio-2.0>=2.42'
--   Found gio-2.0, version 2.68.1
-- Checking for module 'gnutls>=3.2.15'
--   Found gnutls, version 3.7.1
-- Checking for module 'uuid>=2.25.0'
--   Found uuid, version 2.36.1
-- Checking for module 'libssh>=0.6.0'
--   Found libssh, version 0.9.5
-- Checking for module 'hiredis>=0.10.1'
--   Found hiredis, version 0.14.1
-- Checking for module 'libxml-2.0>=2.0'
--   Found libxml-2.0, version 2.9.10
-- Looking for gpgme...
-- Found gpgme: /usr/lib/x86_64-linux-gnu/libgpgme.so, version 1.14.0-unknown
-- Looking for libcrypt...
-- Looking for libcrypt... /usr/lib/x86_64-linux-gnu/libcrypt.so
-- Looking for libgcrypt...
-- Looking for libgcrypt... /usr/lib/x86_64-linux-gnu/libgcrypt.so
-- Looking for freeradius-client library...
-- Looking for radcli library...
--   No suitable radius library found - radius support disabled
-- Looking for libldap...
--   No ldap library found - ldap support disabled
-- Could NOT find Doxygen (missing: DOXYGEN_EXECUTABLE) 
-- WARNING: Doxygen is required to build the HTML docs.
-- Configuring done
-- Generating done
-- Build files have been written to: /home/jloechte/greenbone/gvm-libs/build

make

GVM versions

gvm-libs: main

Environment

Operating system:

$cat /etc/os-release
NAME="Pop!_OS"
VERSION="21.04"
ID=pop
ID_LIKE="ubuntu debian"
PRETTY_NAME="Pop!_OS 21.04"
VERSION_ID="21.04"
HOME_URL="https://pop.system76.com"
SUPPORT_URL="https://support.system76.com"
BUG_REPORT_URL="https://github.com/pop-os/pop/issues"
PRIVACY_POLICY_URL="https://system76.com/privacy"
VERSION_CODENAME=hirsute
UBUNTU_CODENAME=hirsute
LOGO=distributor-logo-pop-os

Kernel:

$ uname -r
5.11.0-7633-generic

Installation method / source: (packages, source installation)

gcc 10.3.0

Logfiles

Cpack create empty package

Expected behavior

Cpack should produce an archive with files inside.

Actual behavior

Cpack (or make package) produce an empty archive.

Steps to reproduce

Optional, to ensure reproducibility:

docker run -it ubuntu:20.04
apt update && apt install -y wget cmake pkg-config libglib2.0-dev libgpgme-dev libgnutls28-dev uuid-dev libssh-gcrypt-dev libldap2-dev libhiredis-dev libxml2-dev libradcli-dev libpcap-dev libgcrypt20-dev

Core:

wget https://github.com/greenbone/gvm-libs/archive/v11.0.1.tar.gz
tar -xvf v11.0.1.tar.gz && cd gvm-libs-11.0.1/ && mkdir build && cd build/
cmake -DCMAKE_BUILD_TYPE=Release ..
cpack or make package
tar -tvf gvm-libs-11.0.1.tar.gz

If using make package_source the archive is not empty (but contain only sources, which is normal).

GVM versions

gvm-libs: v11.0.1

Environment

Operating system:

DISTRIB_ID=Ubuntu DISTRIB_RELEASE=20.04 DISTRIB_CODENAME=focal DISTRIB_DESCRIPTION="Ubuntu 20.04 LTS"

Logfiles

# cpack
CPack: Create package using TGZ
CPack: Install projects
CPack: - Run preinstall target for: gvm-libs
CPack: - Install project: gvm-libs []
CPack: Create package
CPack: - package: /build/gvm-libs-11.0.1/build/gvm-libs-11.0.1.tar.gz generated.
#

Build fails with nasl_isotime error

gvm-libs-9.0.3
Ubuntu 18 LTS

cmake passes ok

Building C object nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_isotime.c.o
/usr/local/src/gvm-libs-9.0.3/nasl/nasl_isotime.c: In function ‘add_years_to_isotime’:
/usr/local/src/gvm-libs-9.0.3/nasl/nasl_isotime.c:561:52: error: ‘%02d’ directive output may be truncated writing between 2 and 5 bytes into a region of size between 0 and 5 [-Werror=format-truncation=]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                                    ^~~~
/usr/local/src/gvm-libs-9.0.3/nasl/nasl_isotime.c:561:34: note: directive argument in the range [-1936, 869]
   snprintf (atime, ISOTIME_SIZE, "%04d%02d%02dT%02d%02d%02d",
                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/local/src/gvm-libs-9.0.3/nasl/nasl_isotime.c:561:34: note: directive argument in the range [-1936, 869]
In file included from /usr/include/stdio.h:862:0,
                 from /usr/local/src/gvm-libs-9.0.3/nasl/nasl_isotime.c:54:

[11.0.1] build fails, beause missing GCC option

The build fails with:
[ 96%] Built target gvm_base_shared
/builddir/build/BUILD/gvm-libs-11.0.1/util/xmlutils.c: In function 'find_child':
/builddir/build/BUILD/gvm-libs-11.0.1/util/xmlutils.c:1750:3: error: 'for' loop initial declarations are only allowed in C99 mode
for (xmlNode *node = element->children; node; node = node->next)
^
/builddir/build/BUILD/gvm-libs-11.0.1/util/xmlutils.c:1750:3: note: use option -std=c99 or -std=gnu99 to compile your code

21.04. Empty section "Edit Scanner Preferences " when create/edit Scan Config

21.04 built from sources. No errors/issues during building.
OS: Debian 10 and Ubuntu 21.04.
Expected behavior: section "Edit scanner preferences" in "Edit scan config" dialog has entry (at least - to not resolve virtual hosts).
Current behavior the section is empty (Edit Scanner Preferences (0)).
No other errors or events. All other functions work like a charm.

with best regards
Vasyl

[21.4.2] Source code signature is missing

The .asc file for the tar ball is missing.

openvas_scanner_connect_unix: Failed to connect to scanner

Hi,
Recently I could not able to compile gvm-libs-10.0.2 on CentOS 7.8. Hence I have installed greenbone freshly on Debian GNU/Linux 10 (buster) to migrate tasks. I took backup of gvmd.db file from CentOS server and moved to Debian Server. After that I'm getting "openvas_scanner_connect_unix: Failed to connect to scanner (/var/run/openvassd.sock): No such file or directory" message and I could not start new scan.

Please help me on this.

[21.4.0] Signature file for the source packages are missing

For the source files, the signature files are missing.

Compiler error in gvm-libs/base/networking.c due to extra parentheses

When compiling the gvm-libs branch (master and 20.8.x) the compiler reports the error "equality comparison with extraneous parentheses". Due to the -Werror flag set the warning is turned into an error and the compilation does not finish

Expected behavior

Expectation is to finish the build process.

Actual behavior

Compilation stops with:

/tmp/gvm-libs/base/networking.c:654:27: error: equality comparison with extraneous parentheses [-Werror,-Wparentheses-equality]
if ((element[0] == 'T'))
~~~~~~~~~~~^~~~~~
/tmp/gvm-libs/base/networking.c:654:27: note: remove extraneous parentheses around the comparison to silence this warning
if ((element[0] == 'T'))
~ ^ ~
/tmp/gvm-libs/base/networking.c:654:27: note: use '=' to turn this equality comparison into an assignment
if ((element[0] == 'T'))
^~
=
/tmp/gvm-libs/base/networking.c:665:32: error: equality comparison with extraneous parentheses [-Werror,-Wparentheses-equality]
else if ((element[0] == 'U'))
~~~~~~~~~~~^~~~~~
/tmp/gvm-libs/base/networking.c:665:32: note: remove extraneous parentheses around the comparison to silence this warning
else if ((element[0] == 'U'))
~ ^ ~
/tmp/gvm-libs/base/networking.c:665:32: note: use '=' to turn this equality comparison into an assignment
else if ((element[0] == 'U'))
^~
=
2 errors generated.

Steps to reproduce

git clone https://github.com/greenbone/gvm-libs.git
cd gvm-libs/
export CC=clang-12
export CXX=clang++-12
mkdir build && cd build && cmake -DCMAKE_INSTALL_PREFIX=/opt/gvm .. && make && make doc

GVM versions

Since gvm-libs is the first package to install, there are no installed versions.

Environment

Operating system:

Debian 10 with backports and clang repostory enabled
Linux host 5.10.11 #1 SMP Wed Jan 27 18:35:21 CET 2021 x86_64 GNU/Linux

Fix

Remove the extraneous parentheses in the following files:

gvm-libs/base/networking.c:654:27
gvm-libs/base/networking.c:665:32

After removing the extraneous parentheses the code compiles successfully.

get_redis_ctx cannot connect to a TCP redis server

I am working on installing OpenVAS in Docker. One common approach for applications that need to use redis is to use the redis image to run a self-contained redis server, then connect to that server over local TCP. However, gvm-libs does not provide a mechanism to get_redis_ctx with a TCP address!

For what it is worth, openvas-scanner has a configuration option db_address = <file>, which is what made me think that support for TCP connections to redis might be a good idea.

Would it be possible to adjust get_redis_ctx to connect either to a Unix socket or a TCP socket? That way, other consumers of the API could just use whatever the user supplied.

[request] save the output of exec_nasl_script into a buffer

Question: When the nasl script is executed, it output the result to the console. Is there a way to save the result into a buffer (ex: multithread) ?

root@lab:~/openvas/gvm-libs/build# ./nasl/openvas-nasl -c /etc/openvas/openvassd.conf -t 127.0.0.1 /var/lib/openvas/plugins/gb_redis_detect.nasl
Detected Redis Server

Version:       5.0.3
Location:      6379/tcp
CPE:           cpe:/a:redis:redis:5.0.3

Concluded from version/product identification result:
redis_version:5.0.3

Extra information:
Redis Server is not protected with a password.

How to output the nasl results ?

register_and_report_cpe --> log_message --> security_something

The nasl script calls register_and_report_cpe( defined in /var/lib/openvas/plugins/cpe.inc (default installation)) to report the results.
register_and_report_cpe calls log_message defined in nasl_scanner_glue.c.
log_message calls security_something defined in nasl_scanner_glue.c

step 1: register_and_report_cpe

root@lab:~/openvas/gvm-libs/build# cat /var/lib/openvas/plugins/cpe.inc
....

function register_and_report_cpe( app, ver, concluded, cpename, base, expr, insloc, regPort, regService, regProto, conclUrl, extra ) {

  ....

  if( cpename ) {
    register_product( cpe:cpename, location:insloc, port:regPort, proto:regProto, service:regService );

    log_message( data:build_detection_report( app:app,
                                              version:ver,
                                              install:insloc,
                                              cpe:cpename,
                                              extra:extra,
                                              concluded:concluded,
                                              concludedUrl:conclUrl ),
                                              port:regPort,
                                              proto:regProto );
  }
  return NULL;

step 2: log_message

tree_cell *
log_message (lex_ctxt * lexic)
{
  return security_something (lexic, proto_post_log, post_log);
}

step 3: security_something

static tree_cell *
security_something (lex_ctxt * lexic, proto_post_something_t proto_post_func,
                    post_something_t post_func)
{
    ....
    // Output the script result here. ***********
}

references

RHEL / Centos 7 libgcrypt does not support GCRY_CIPHER_MODE_GCM

This is probably better handled as a version check in cmake for a compatible libgcrypt version. Outside of including external libraries in the archive (we do this in the ossec project) I'm not sure what you can do to fix this:

[root@c7-64-dev-scott gvm-libs-9.0.2]# rpm -q libgcrypt
libgcrypt-1.5.3-14.el7.x86_64

[ 42%] Building C object nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_crypto2.c.o
cd /root/src/gvm-libs-9.0.2/nasl && /usr/lib64/ccache/cc -DHAVE_LIBKSBA -Dopenvas_nasl_shared_EXPORTS -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -Wformat -Wformat-security -O2 -D_FORTIFY_SOURCE=2 -fstack-protector -Wall -D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1 -fno-strict-aliasing -g -Werror -fPIC -DOPENVASSD_CONF="/etc/openvas/openvassd.conf" -DOPENVAS_STATE_DIR="/var/lib/openvas" -DOPENVASLIB_VERSION="9.0.2" -DOPENVAS_SYSCONF_DIR="/etc/openvas" -o CMakeFiles/openvas_nasl_shared.dir/nasl_crypto2.c.o -c /root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function ‘nasl_aes128_gcm_encrypt’:
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1572:51: error: ‘GCRY_CIPHER_MODE_GCM’ undeclared (first use in this function)
return encrypt_data (lexic, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_GCM);
^
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1572:51: note: each undeclared identifier is reported only once for each function it appears in
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function ‘nasl_aes256_gcm_encrypt’:
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1578:51: error: ‘GCRY_CIPHER_MODE_GCM’ undeclared (first use in this function)
return encrypt_data (lexic, GCRY_CIPHER_AES256, GCRY_CIPHER_MODE_GCM);
^
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function ‘nasl_aes128_gcm_encrypt’:
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1573:1: error: control reaches end of non-void function [-Werror=return-type]
}
^
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c: In function ‘nasl_aes256_gcm_encrypt’:
/root/src/gvm-libs-9.0.2/nasl/nasl_crypto2.c:1579:1: error: control reaches end of non-void function [-Werror=return-type]
}
^
cc1: all warnings being treated as errors
make[2]: *** [nasl/CMakeFiles/openvas_nasl_shared.dir/nasl_crypto2.c.o] Error 1
make[2]: Leaving directory /root/src/gvm-libs-9.0.2' make[1]: *** [nasl/CMakeFiles/openvas_nasl_shared.dir/all] Error 2 make[1]: Leaving directory /root/src/gvm-libs-9.0.2'
make: *** [all] Error 2

[21.4.0] build fails with gcc error

The build fails with:
/builddir/build/BUILD/gvm-libs-21.4.0/boreas/alivedetection.c: In function 'start_alive_detection':
/builddir/build/BUILD/gvm-libs-21.4.0/boreas/alivedetection.c:271:64: error: 'prev_alive' may be used uninitialized in this function [-Werror=maybe-uninitialized]
number_of_dead_hosts = remaining_batch - (curr_alive - prev_alive);
~~~~~~~~~~~~^~~~~~~~~~~~~
/builddir/build/BUILD/gvm-libs-21.4.0/boreas/alivedetection.c:82:7: note: 'prev_alive' was declared here
int prev_alive;
^~~~~~~~~~
/builddir/build/BUILD/gvm-libs-21.4.0/boreas/alivedetection.c:271:32: error: 'remaining_batch' may be used uninitialized in this function [-Werror=maybe-uninitialized]
number_of_dead_hosts = remaining_batch - (curr_alive - prev_alive);
~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/builddir/build/BUILD/gvm-libs-21.4.0/boreas/alivedetection.c:81:7: note: 'remaining_batch' was declared here
int remaining_batch;
^~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
make[2]: *** [boreas/CMakeFiles/gvm_boreas_shared.dir/build.make:66: boreas/CMakeFiles/gvm_boreas_shared.dir/alivedetection.c.o] Error 1
make[2]: *** Waiting for unfinished jobs....
make[2]: Entering directory '/builddir/build/BUILD/gvm-libs-21.4.0'

Error messages end up on stderr if file does not exist

gvm-libs/util/nvticache.c

Lines 157 to 159 in c939d92

 g_snprintf (command, sizeof (command), 

 "grep PLUGIN_SET %s/plugin_feed_info.inc | sed -e 's/[^0-9]//g'", 

 src_path);

This piece of code expects the file plugin_feed_info.inc to be present in the src_path location, but does not assert this fact before trying to have the file accessed by external commands.

If the file does not exist, this results in an error message from grep being printed to the stderr of the process calling this function every time the function is called. As this function is used to monitor the state of the feed and the need for refreshing the cache, the error messages show up every few seconds on stderr.

It would be preferable to check for the existence of the file before attempting to access it and log messages about its non-existence to the appropriate logs if this is desired.

Generally, if execution is handed to external tools via popen, care should be taken to collect error messages produced by those tools and log the accordingly.

It should also be considered whether the dependence on external tools is really desirable or if a solution with the functionality provided by standard C libraries is not more apt.

libgvm util g_message end up in stdout

Expected behavior

libgvm util g_message should be written to the configure log file from the gvmd_log.conf.

Starting Greenbone Vulnerability Manager...
libgvm util-Message: 14:57:14.268: Updated NVT cache from version 0 to 202204271008

Actual behavior

libgvm util g_message are written to stdout.

Steps to reproduce

Launch gvmd process with the following gvmd_log.conf:

[libgvm util]
prepend=%t %s %p
separator=:
prepend_time_format=%Y-%m-%d %Hh%M.%S %Z
file=/var/log/gvm/gvmd.log
level=64

GVM versions

gvm: (gvmd --version)

Greenbone Vulnerability Manager 21.4.5

openvas: (openvas --version)

OpenVAS 21.4.4

gvm-libs:

gvm-libs 21.4.4

Environment

Operating system:

Linux 41eef60f8f57 5.10.104-linuxkit #1 SMP Thu Mar 17 17:08:06 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

root@41eef60f8f57:/home/delve/warden/src# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04.4 LTS"

Installation method / source: (packages, source installation)

Logfiles

md   main:MESSAGE:2022-04-29 14h46.17 utc:157:    Greenbone Vulnerability Manager version 21.4.5 (DB revision 242)
md manage:   INFO:2022-04-29 14h46.17 utc:157:    Getting users.
md manage:WARNING:2022-04-29 14h46.17 utc:157: sql_exec_internal: PQexec failed: ERROR:  relation "public.meta" does not exist
LINE 1: SELECT value FROM public.meta WHERE name = 'database_version...
                          ^
 (7)
md manage:WARNING:2022-04-29 14h46.17 utc:157: sql_exec_internal: SQL: SELECT value FROM public.meta WHERE name = 'database_version';
md manage:WARNING:2022-04-29 14h46.17 utc:157: sql_x: sql_exec_internal failed
md manage:MESSAGE:2022-04-29 14h46.17 utc:157: No SCAP database found
md manage:MESSAGE:2022-04-29 14h46.17 utc:157: No CERT database found
md   main:MESSAGE:2022-04-29 14h46.20 utc:162:    Greenbone Vulnerability Manager version 21.4.5 (DB revision 242)
md manage:   INFO:2022-04-29 14h46.20 utc:162:    Modifying setting.
md manage:MESSAGE:2022-04-29 14h46.20 utc:162: No SCAP database found
md manage:MESSAGE:2022-04-29 14h46.20 utc:162: No CERT database found
md   main:MESSAGE:2022-04-29 14h46.21 utc:165:    Greenbone Vulnerability Manager version 21.4.5 (DB revision 242)
md manage:   INFO:2022-04-29 14h46.21 utc:165:    Getting users.
md manage:MESSAGE:2022-04-29 14h46.21 utc:165: No SCAP database found
md manage:MESSAGE:2022-04-29 14h46.21 utc:165: No CERT database found
md   main:MESSAGE:2022-04-29 14h46.22 utc:169:    Greenbone Vulnerability Manager version 21.4.5 (DB revision 242)
md manage:   INFO:2022-04-29 14h46.22 utc:169:    Creating user.
md manage:MESSAGE:2022-04-29 14h46.22 utc:169: No SCAP database found
md manage:MESSAGE:2022-04-29 14h46.22 utc:169: No CERT database found
md   main:MESSAGE:2022-04-29 14h46.22 utc:172:    Greenbone Vulnerability Manager version 21.4.5 (DB revision 242)
md manage:MESSAGE:2022-04-29 14h46.22 utc:173: No SCAP database found
md manage:MESSAGE:2022-04-29 14h46.22 utc:173: No CERT database found
libgvm util:   INFO:2022-04-29 14h46.23 utc:173: starting key generation ...
libgvm util:   INFO:2022-04-29 14h46.23 utc:173: OpenPGP key 'GVM Credential Encryption' has been generated
md manage:   INFO:2022-04-29 14h46.23 utc:206: osp_scanner_feed_version: failed to get scanner_feed_version. OSPd OpenVAS is still starting
md manage:WARNING:2022-04-29 14h46.23 utc:205: update_scap: No SCAP db present, rebuilding SCAP db from scratch
md manage:   INFO:2022-04-29 14h46.23 utc:207: Initializing CERT database
md manage:   INFO:2022-04-29 14h46.23 UTC:207: sync_cert: Updating data from feed
md manage:   INFO:2022-04-29 14h46.23 UTC:207: update_dfn_xml: dfn-cert-2008.xml
md manage:   INFO:2022-04-29 14h46.23 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2008.xml
md manage:   INFO:2022-04-29 14h46.23 UTC:207: update_dfn_xml: dfn-cert-2020.xml
md manage:   INFO:2022-04-29 14h46.23 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2020.xml
md manage:   INFO:2022-04-29 14h46.23 utc:205: update_scap: Updating data from feed
md manage:   INFO:2022-04-29 14h46.23 utc:205: Updating CPEs
md manage:   INFO:2022-04-29 14h46.33 UTC:207: update_dfn_xml: dfn-cert-2021.xml
md manage:   INFO:2022-04-29 14h46.33 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2021.xml
md manage:   INFO:2022-04-29 14h46.42 UTC:207: update_dfn_xml: dfn-cert-2009.xml
md manage:   INFO:2022-04-29 14h46.42 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2009.xml
md manage:   INFO:2022-04-29 14h46.45 UTC:207: update_dfn_xml: dfn-cert-2022.xml
md manage:   INFO:2022-04-29 14h46.45 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2022.xml
md manage:   INFO:2022-04-29 14h46.48 UTC:207: update_dfn_xml: dfn-cert-2019.xml
md manage:   INFO:2022-04-29 14h46.48 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2019.xml
md manage:   INFO:2022-04-29 14h46.56 UTC:207: update_dfn_xml: dfn-cert-2018.xml
md manage:   INFO:2022-04-29 14h46.56 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2018.xml
md manage:   INFO:2022-04-29 14h47.07 UTC:207: update_dfn_xml: dfn-cert-2015.xml
md manage:   INFO:2022-04-29 14h47.07 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2015.xml
md manage:   INFO:2022-04-29 14h47.13 UTC:207: update_dfn_xml: dfn-cert-2014.xml
md manage:   INFO:2022-04-29 14h47.13 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2014.xml
md manage:   INFO:2022-04-29 14h47.18 UTC:207: update_dfn_xml: dfn-cert-2016.xml
md manage:   INFO:2022-04-29 14h47.18 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2016.xml
md manage:   INFO:2022-04-29 14h47.24 UTC:207: update_dfn_xml: dfn-cert-2017.xml
md manage:   INFO:2022-04-29 14h47.24 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2017.xml
md manage:   INFO:2022-04-29 14h47.30 UTC:207: update_dfn_xml: dfn-cert-2013.xml
md manage:   INFO:2022-04-29 14h47.30 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2013.xml
md manage:   INFO:2022-04-29 14h47.34 UTC:207: update_dfn_xml: dfn-cert-2012.xml
md manage:   INFO:2022-04-29 14h47.34 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2012.xml
md manage:   INFO:2022-04-29 14h47.37 UTC:207: update_dfn_xml: dfn-cert-2010.xml
md manage:   INFO:2022-04-29 14h47.37 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2010.xml
md manage:   INFO:2022-04-29 14h47.40 UTC:207: update_dfn_xml: dfn-cert-2011.xml
md manage:   INFO:2022-04-29 14h47.40 UTC:207: Updating /var/lib/gvm/cert-data/dfn-cert-2011.xml
md manage:   INFO:2022-04-29 14h47.43 UTC:207: Updating /var/lib/gvm/cert-data/CB-K13.xml
md manage:   INFO:2022-04-29 14h47.44 UTC:207: Updating /var/lib/gvm/cert-data/CB-K15.xml
md manage:   INFO:2022-04-29 14h47.48 UTC:207: Updating /var/lib/gvm/cert-data/CB-K14.xml
md manage:   INFO:2022-04-29 14h47.51 UTC:207: Updating /var/lib/gvm/cert-data/CB-K16.xml
md manage:   INFO:2022-04-29 14h47.57 UTC:207: Updating /var/lib/gvm/cert-data/CB-K17.xml
md manage:   INFO:2022-04-29 14h48.03 UTC:207: Updating /var/lib/gvm/cert-data/CB-K19.xml
md manage:   INFO:2022-04-29 14h48.06 UTC:207: Updating /var/lib/gvm/cert-data/CB-K18.xml
md manage:   INFO:2022-04-29 14h48.09 UTC:207: Updating /var/lib/gvm/cert-data/CB-K20.xml
md manage:   INFO:2022-04-29 14h48.13 UTC:207: Updating /var/lib/gvm/cert-data/CB-K21.xml
md manage:   INFO:2022-04-29 14h48.16 UTC:207: Updating /var/lib/gvm/cert-data/CB-K22.xml
md manage:   INFO:2022-04-29 14h48.17 UTC:207: SCAP database does not exist (yet), skipping CERT severity score update
md manage:   INFO:2022-04-29 14h48.17 UTC:207: sync_cert: Updating CERT info succeeded.
md manage:   INFO:2022-04-29 14h49.39 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2019.xml
md manage:   INFO:2022-04-29 14h50.41 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2018.xml
md manage:   INFO:2022-04-29 14h51.42 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2008.xml
md manage:   INFO:2022-04-29 14h51.58 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2020.xml
md manage:   INFO:2022-04-29 14h52.48 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2021.xml
md manage:   INFO:2022-04-29 14h53.43 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2009.xml
md manage:   INFO:2022-04-29 14h54.00 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2022.xml
md manage:   INFO:2022-04-29 14h54.09 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2013.xml
md manage:   INFO:2022-04-29 14h54.23 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2007.xml
md manage:   INFO:2022-04-29 14h54.34 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2006.xml
md manage:   INFO:2022-04-29 14h54.45 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2012.xml
md manage:   INFO:2022-04-29 14h54.57 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2004.xml
md manage:   INFO:2022-04-29 14h55.03 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2010.xml
md manage:   INFO:2022-04-29 14h55.14 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2011.xml
md manage:   INFO:2022-04-29 14h55.27 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2005.xml
md manage:   INFO:2022-04-29 14h55.35 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2015.xml
md manage:   INFO:2022-04-29 14h55.46 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2014.xml
md manage:   INFO:2022-04-29 14h55.59 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2016.xml
md manage:   INFO:2022-04-29 14h56.12 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2002.xml
md manage:   INFO:2022-04-29 14h56.20 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2003.xml
md manage:   INFO:2022-04-29 14h56.22 UTC:205: Updating /var/lib/gvm/scap-data/nvdcve-2.0-2017.xml
md manage:   INFO:2022-04-29 14h56.51 UTC:205: Updating OVAL data
md manage:   INFO:2022-04-29 14h56.57 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/c/oval.xml
md manage:   INFO:2022-04-29 14h56.57 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/m/oval.xml
md manage:   INFO:2022-04-29 14h56.57 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/ios.xml
md manage:   INFO:2022-04-29 14h56.57 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/pixos.xml
md manage:   INFO:2022-04-29 14h56.57 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/p/oval.xml
md manage:   INFO:2022-04-29 14h58.04 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/i/oval.xml
md manage:   INFO:2022-04-29 14h58.07 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/macos.xml
md manage:   INFO:2022-04-29 14h58.07 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/unix.xml
md manage:   INFO:2022-04-29 14h58.12 UTC:205: Updating /var/lib/gvm/scap-data/oval/5.10/org.mitre.oval/v/family/windows.xml
md manage:   INFO:2022-04-29 14h58.23 UTC:205: Updating user OVAL definitions.
md manage:   INFO:2022-04-29 14h58.23 UTC:205: Updating CVSS scores and CVE counts for CPEs
md manage:   INFO:2022-04-29 14h59.51 UTC:205: Updating CVSS scores for OVAL definitions
md manage:   INFO:2022-04-29 14h59.52 UTC:205: Updating placeholder CPEs
md manage:   INFO:2022-04-29 15h00.07 UTC:205: Updating Max CVSS for DFN-CERT
md manage:   INFO:2022-04-29 15h00.10 UTC:205: Updating DFN-CERT CVSS max succeeded.
md manage:   INFO:2022-04-29 15h00.10 UTC:205: Updating Max CVSS for CERT-Bund
md manage:   INFO:2022-04-29 15h00.12 UTC:205: Updating CERT-Bund CVSS max succeeded.
md manage:   INFO:2022-04-29 15h00.15 UTC:205: update_scap_end: Updating SCAP info succeeded
md manage:   INFO:2022-04-29 15h00.18 UTC:743: OSP service has different VT status (version 202204271008) from database (version (null), 0 VTs). Starting update ..

	g_snprintf (command, sizeof (command),
	"grep PLUGIN_SET %s/plugin_feed_info.inc \| sed -e 's/[^0-9]//g'",
	src_path);

greenbone / gvm-libs Goto Github PK

gvm-libs's People

Contributors

Stargazers

Watchers

Forkers

gvm-libs's Issues

Expected behavior

Current behavior

Steps to reproduce

GVM versions

Environment

Expected behavior

Current behavior

Steps to reproduce

Environment

Expected behavior

Actual behavior

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

Actual behavior

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

Actual behavior

Steps to reproduce

Expected behavior

Actual behavior

Steps to reproduce

GVM versions

Environment

Expected behavior

Actual behavior

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

Current behavior

Steps to reproduce

GVM versions

Environent

Logfiles

Expected behavior

Current behavior

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

Actual behavior

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

Current behavior

root@OpenVAS:~/gvm-libs/build# cmake .. -- Configuring the Greenbone Vulnerability Management Libraries... -- Looking for clang-format... -- Looking for clang-format... /usr/bin/clang-format -- Install prefix: /usr/local -- Checking for module 'hiredis>=0.10.1'

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

Actual behavior

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

Actual behavior

Steps to reproduce

GVM versions

Environment

Logfiles

Expected behavior

root@OpenVAS:~/gvm-libs/build# cmake ..
-- Configuring the Greenbone Vulnerability Management Libraries...
-- Looking for clang-format...
-- Looking for clang-format... /usr/bin/clang-format
-- Install prefix: /usr/local
-- Checking for module 'hiredis>=0.10.1'