electricalwind/data7

A vulnerability patch gathering tool

data7's Issues

cannot install under Maven

I'm trying to compile all projects with Maven. Here are the first steps I'm doing:

cd utilitaries/misc
mvn install
cd ../../data7
mvn install

This fails (error below). AFAIU, there is a cyclic dependency between data7-miscUtils and data7-parent.

In what order should I compile?

Thanks!

[ERROR] Failed to execute goal on project data7: Could not resolve dependencies for project lu.jimenez.research:data7:jar:1.99-SNAPSHOT: Failed to collect dependencies at lu.jimenez.research:data7-miscUtils:jar:1.99-SNAPSHOT: Failed to read artifact descriptor for lu.jimenez.research:data7-miscUtils:jar:1.99-SNAPSHOT: Could not find artifact lu.jimenez.research:data7-parent:pom:1.99-SNAPSHOT -> [Help 1]

question: data in diff format?

Hi!

In the repo, I'm looking for the diffs of the 1,598 fixed vulnerabilities listed in Table 1 of the paper.

Are there in a specific subfolder?

Thanks!

--Martin

Still have questions in how to use

What’s the meaning of aproject in the example?

Does the xml database no longer update?

I encounter the following question:
Exception in thread "main" java.io.FileNotFoundException: https://nvd.nist.gov/feeds/xml/cve/2.0/nvdcve-2.0-2002.xml.zip
It seems that the nvd database used in the framework has been out of use.
Currently only https://nvd.nist.gov/vuln/data-feeds is available.

Not well formed xml

After creating linux-kernel dataset, the resulting file,linux_kernel-data7.xml, is not well-formed.

Error message from well-formedness test:

Character reference "&#12" is an invalid XML character.

The dataset was created 3rd Jan 2019.