cvss.h File Reference

Protos for CVSS utility functions. More...

#include <glib.h>

Include dependency graph for cvss.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions
double	get_cvss_score_from_base_metrics (const char *)
	Calculate CVSS Score. More...

Detailed Description

Protos for CVSS utility functions.

This file contains the protos for cvss.c

Definition in file cvss.h.

Function Documentation

get_cvss_score_from_base_metrics()

double get_cvss_score_from_base_metrics

(

const char *

cvss_str

)

Calculate CVSS Score.

Parameters

cvss_str

Base vector string from which to compute score.

Returns

The resulting score. -1 upon error during parsing.

Definition at line 358 of file cvss.c.

{
  struct cvss cvss;
  char *token, *base_str, *base_metrics;
 
  if (cvss_str == NULL)
    return -1.0;
 
  if (g_str_has_prefix (cvss_str, "CVSS:3.1/")
      || g_str_has_prefix (cvss_str, "CVSS:3.0/"))
    return get_cvss_score_from_base_metrics_v3 (cvss_str
                                                + strlen ("CVSS:3.X/"));
 
  memset (&cvss, 0x00, sizeof (struct cvss));
 
  base_str = base_metrics = g_strdup_printf ("%s/", cvss_str);
 
  while ((token = strchr (base_metrics, '/')) != NULL)
    {
      char *token2 = strtok (base_metrics, ":");
      char *metric_name = token2;
      char *metric_value;
      enum base_metrics mval;
      int rc;
 
      *token++ = '\0';
 
      if (metric_name == NULL)
        goto ret_err;
 
      metric_value = strtok (NULL, ":");
 
      if (metric_value == NULL)
        goto ret_err;
 
      rc = toenum (metric_name, &mval);
      if (rc)
        goto ret_err;
 
      if (set_impact_from_str (metric_value, mval, &cvss))
        goto ret_err;
 
      base_metrics = token;
    }
 
  g_free (base_str);
  return __get_cvss_score (&cvss);
 
ret_err:
  g_free (base_str);
  return (double) -1;
}

References __get_cvss_score(), get_cvss_score_from_base_metrics_v3(), set_impact_from_str(), and toenum().

Referenced by Ensure().

Here is the call graph for this function:

Here is the caller graph for this function: