csaf-rs 0.5.1

A parser for the CSAF standard written in Rust
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309

use crate::csaf::raw::{RawDocument, RawValidatable};
use crate::csaf2_1::testcases::*;
use crate::schema::csaf2_1::schema::CommonSecurityAdvisoryFramework;
use crate::test_validation::TestValidator;
use crate::validation::{TestResult, TestResultStatus, Validatable};
use crate::validations::test_schema::validate_schema_csaf_2_1;
enum Severity {
    Error,
    Warning,
    Info,
}

fn to_test_result(
    test_id: &str,
    severity: Severity,
    result: Option<Result<(), Vec<crate::validation::ValidationError>>>,
) -> TestResult {
    TestResult {
        test_id: test_id.to_string(),
        status: match result {
            None => TestResultStatus::NotFound,
            Some(Ok(())) => TestResultStatus::Success,
            Some(Err(data)) => match severity {
                Severity::Error => TestResultStatus::Failure {
                    errors: data,
                    warnings: vec![],
                    infos: vec![],
                },
                Severity::Warning => TestResultStatus::Failure {
                    errors: vec![],
                    warnings: data,
                    infos: vec![],
                },
                Severity::Info => TestResultStatus::Failure {
                    errors: vec![],
                    warnings: vec![],
                    infos: data,
                },
            },
        },
    }
}

impl Validatable for CommonSecurityAdvisoryFramework {
    fn tests_in_preset(preset: &str) -> Option<Vec<&'static str>> {
        match preset {
            "mandatory" => Some(mandatory_tests()),
            "recommended" => Some(recommended_tests()),
            "informative" => Some(informative_tests()),
            "schema" => Some(vec!["schema"]),
            "basic" => Some([vec!["schema"], mandatory_tests()].concat()),
            "extended" => Some([vec!["schema"], mandatory_tests(), recommended_tests()].concat()),
            "full" => Some(
                [
                    vec!["schema"],
                    mandatory_tests(),
                    recommended_tests(),
                    informative_tests(),
                ]
                .concat(),
            ),
            "external-request-free" => Some(
                [
                    vec!["schema"],
                    mandatory_tests(),
                    recommended_tests(),
                    informative_tests(),
                ]
                .concat()
                .into_iter()
                .filter(|id| *id != "6.3.6" && *id != "6.3.7")
                .collect(),
            ),
            "consistent-revision-history" => Some(vec![
                "6.1.14", "6.1.18", "6.1.19", "6.1.21", "6.1.22", "6.1.37", "6.2.4", "6.2.5", "6.2.6", "6.2.21",
                "6.2.33",
            ]),
            "consistent-date-times" => Some(vec!["6.1.37", "6.1.45", "6.1.49", "6.1.51", "6.1.52", "6.1.53"]),
            "ssvc" => Some(vec![
                "6.1.46", "6.1.47", "6.1.48", "6.1.49", "6.2.3", "6.2.34", "6.2.35", "6.2.36", "6.2.37", "6.3.13",
                "6.3.14", "6.3.15",
            ]),
            _ => None,
        }
    }

    fn run_test(&self, test_id: &str) -> TestResult {
        let mandatory_result = to_test_result(
            test_id,
            Severity::Error,
            match test_id {
                // mandatory tests
                "6.1.1" => Some(ValidatorForTest6_1_1.validate(self)),
                "6.1.2" => Some(ValidatorForTest6_1_2.validate(self)),
                "6.1.3" => Some(ValidatorForTest6_1_3.validate(self)),
                "6.1.4" => Some(ValidatorForTest6_1_4.validate(self)),
                "6.1.5" => Some(ValidatorForTest6_1_5.validate(self)),
                "6.1.6" => Some(ValidatorForTest6_1_6.validate(self)),
                "6.1.7" => None, // Some(ValidatorForTest6_1_7.validate(self)),
                "6.1.8" => None, // Some(ValidatorForTest6_1_8.validate(self)),
                "6.1.9" => Some(ValidatorForTest6_1_9.validate(self)),
                "6.1.10" => Some(ValidatorForTest6_1_10.validate(self)),
                "6.1.11" => None, // Some(ValidatorForTest6_1_11.validate(self)),
                "6.1.12" => Some(ValidatorForTest6_1_12.validate(self)),
                "6.1.13" => Some(ValidatorForTest6_1_13.validate(self)),
                "6.1.14" => None, // Some(ValidatorForTest6_1_14.validate(self)),
                "6.1.15" => Some(ValidatorForTest6_1_15.validate(self)),
                "6.1.16" => Some(ValidatorForTest6_1_16.validate(self)),
                "6.1.17" => Some(ValidatorForTest6_1_17.validate(self)),
                "6.1.18" => Some(ValidatorForTest6_1_18.validate(self)),
                "6.1.19" => Some(ValidatorForTest6_1_19.validate(self)),
                "6.1.20" => Some(ValidatorForTest6_1_20.validate(self)),
                "6.1.21" => Some(ValidatorForTest6_1_21.validate(self)),
                "6.1.22" => Some(ValidatorForTest6_1_22.validate(self)),
                "6.1.23" => Some(ValidatorForTest6_1_23.validate(self)),
                "6.1.24" => Some(ValidatorForTest6_1_24.validate(self)),
                "6.1.25" => Some(ValidatorForTest6_1_25.validate(self)),
                "6.1.26" => Some(ValidatorForTest6_1_26.validate(self)),
                "6.1.27.1" => Some(ValidatorForTest6_1_27_1.validate(self)),
                "6.1.27.2" => Some(ValidatorForTest6_1_27_2.validate(self)),
                "6.1.27.3" => Some(ValidatorForTest6_1_27_3.validate(self)),
                "6.1.27.4" => Some(ValidatorForTest6_1_27_4.validate(self)),
                "6.1.27.5" => Some(ValidatorForTest6_1_27_5.validate(self)),
                "6.1.27.6" => Some(ValidatorForTest6_1_27_6.validate(self)),
                "6.1.27.7" => Some(ValidatorForTest6_1_27_7.validate(self)),
                "6.1.27.8" => Some(ValidatorForTest6_1_27_8.validate(self)),
                "6.1.27.9" => Some(ValidatorForTest6_1_27_9.validate(self)),
                "6.1.27.10" => Some(ValidatorForTest6_1_27_10.validate(self)),
                "6.1.27.11" => Some(ValidatorForTest6_1_27_11.validate(self)),
                "6.1.27.12" => Some(ValidatorForTest6_1_27_12.validate(self)),
                "6.1.27.13" => None, // Some(ValidatorForTest6_1_27_13.validate(self)),
                "6.1.27.14" => Some(ValidatorForTest6_1_27_14.validate(self)),
                "6.1.27.15" => Some(ValidatorForTest6_1_27_15.validate(self)),
                "6.1.27.16" => Some(ValidatorForTest6_1_27_16.validate(self)),
                "6.1.27.17" => Some(ValidatorForTest6_1_27_17.validate(self)),
                "6.1.27.18" => Some(ValidatorForTest6_1_27_18.validate(self)),
                "6.1.27.19" => Some(ValidatorForTest6_1_27_19.validate(self)),
                "6.1.28" => Some(ValidatorForTest6_1_28.validate(self)),
                "6.1.29" => Some(ValidatorForTest6_1_29.validate(self)),
                "6.1.30" => Some(ValidatorForTest6_1_30.validate(self)),
                "6.1.31" => Some(ValidatorForTest6_1_31.validate(self)),
                "6.1.32" => Some(ValidatorForTest6_1_32.validate(self)),
                "6.1.33" => None, // Some(ValidatorForTest6_1_33.validate(self)),
                "6.1.34" => Some(ValidatorForTest6_1_34.validate(self)),
                "6.1.35" => Some(ValidatorForTest6_1_35.validate(self)),
                "6.1.36" => None, // Some(ValidatorForTest6_1_36.validate(self)),
                "6.1.37" => None, // Some(ValidatorForTest6_1_37.validate(self)),
                "6.1.38" => Some(ValidatorForTest6_1_38.validate(self)),
                "6.1.39" => Some(ValidatorForTest6_1_39.validate(self)),
                "6.1.40" => Some(ValidatorForTest6_1_40.validate(self)),
                "6.1.41" => Some(ValidatorForTest6_1_41.validate(self)),
                "6.1.42" => Some(ValidatorForTest6_1_42.validate(self)),
                "6.1.43" => Some(ValidatorForTest6_1_43.validate(self)),
                "6.1.44" => Some(ValidatorForTest6_1_44.validate(self)),
                "6.1.45" => Some(ValidatorForTest6_1_45.validate(self)),
                "6.1.46" => Some(ValidatorForTest6_1_46.validate(self)),
                "6.1.47" => Some(ValidatorForTest6_1_47.validate(self)),
                "6.1.48" => None, // Some(ValidatorForTest6_1_48.validate(self)),
                "6.1.49" => None, // Some(ValidatorForTest6_1_49.validate(self)),
                "6.1.50" => None, // Some(ValidatorForTest6_1_50.validate(self)),
                "6.1.51" => Some(ValidatorForTest6_1_51.validate(self)),
                "6.1.52" => Some(ValidatorForTest6_1_52.validate(self)),
                "6.1.53" => Some(ValidatorForTest6_1_53.validate(self)),
                "6.1.54" => Some(ValidatorForTest6_1_54.validate(self)),
                "6.1.55" => Some(ValidatorForTest6_1_55.validate(self)),
                "6.1.56" => Some(ValidatorForTest6_1_56.validate(self)),
                "6.1.57" => Some(ValidatorForTest6_1_57.validate(self)),
                "6.1.58" => Some(ValidatorForTest6_1_58.validate(self)),
                "6.1.59" => None,   // Some(ValidatorForTest6_1_59.validate(self)),
                "6.1.60.1" => None, // Some(ValidatorForTest6_1_60_1.validate(self)),
                "6.1.60.2" => None, // Some(ValidatorForTest6_1_60_2.validate(self)),
                "6.1.60.3" => None, // Some(ValidatorForTest6_1_60_3.validate(self)),
                "6.1.61" => Some(ValidatorForTest6_1_61.validate(self)),
                _ => None,
            },
        );
        if TestResultStatus::NotFound != mandatory_result.status {
            return mandatory_result;
        }

        let recommended_result = to_test_result(
            test_id,
            Severity::Warning,
            match test_id {
                // recommended tests
                "6.2.1" => Some(ValidatorForTest6_2_1.validate(self)),
                "6.2.2" => Some(ValidatorForTest6_2_2.validate(self)),
                "6.2.3" => Some(ValidatorForTest6_2_3.validate(self)),
                "6.2.4" => Some(ValidatorForTest6_2_4.validate(self)),
                "6.2.5" => Some(ValidatorForTest6_2_5.validate(self)),
                "6.2.6" => Some(ValidatorForTest6_2_6.validate(self)),
                "6.2.7" => Some(ValidatorForTest6_2_7.validate(self)),
                "6.2.8" => Some(ValidatorForTest6_2_8.validate(self)),
                "6.2.9" => Some(ValidatorForTest6_2_9.validate(self)),
                "6.2.11" => Some(ValidatorForTest6_2_11.validate(self)),
                "6.2.12" => Some(ValidatorForTest6_2_12.validate(self)),
                "6.2.13" => {
                    // see below in RawValidatable
                    return TestResult {
                        test_id: test_id.to_string(),
                        status: TestResultStatus::Skipped,
                    };
                },
                "6.2.14" => Some(ValidatorForTest6_2_14.validate(self)),
                "6.2.15" => Some(ValidatorForTest6_2_15.validate(self)),
                "6.2.16" => Some(ValidatorForTest6_2_16.validate(self)),
                "6.2.17" => Some(ValidatorForTest6_2_17.validate(self)),
                "6.2.18" => Some(ValidatorForTest6_2_18.validate(self)),
                "6.2.19" => None, // Some(ValidatorForTest6_2_19.validate(self)),
                "6.2.20" => {
                    // see below in RawValidatable
                    return TestResult {
                        test_id: test_id.to_string(),
                        status: TestResultStatus::Skipped,
                    };
                },
                "6.2.21" => Some(ValidatorForTest6_2_21.validate(self)),
                "6.2.22" => Some(ValidatorForTest6_2_22.validate(self)),
                "6.2.23" => None, // Some(ValidatorForTest6_2_23.validate(self)),
                "6.2.24" => None, // Some(ValidatorForTest6_2_24.validate(self)),
                "6.2.25" => None, // Some(ValidatorForTest6_2_25.validate(self)),
                "6.2.26" => None, // Some(ValidatorForTest6_2_26.validate(self)),
                "6.2.27" => None, // Some(ValidatorForTest6_2_27.validate(self)),
                "6.2.28" => Some(ValidatorForTest6_2_28.validate(self)),
                "6.2.29" => Some(ValidatorForTest6_2_29.validate(self)),
                "6.2.30" => Some(ValidatorForTest6_2_30.validate(self)),
                "6.2.31" => None, // Some(ValidatorForTest6_2_31.validate(self)),
                "6.2.32" => None, // Some(ValidatorForTest6_2_32.validate(self)),
                "6.2.33" => Some(ValidatorForTest6_2_33.validate(self)),
                "6.2.34" => None, // Some(ValidatorForTest6_2_34.validate(self)),
                "6.2.35" => None, // Some(ValidatorForTest6_2_35.validate(self)),
                "6.2.36" => None, // Some(ValidatorForTest6_2_36.validate(self)),
                "6.2.37" => None, // Some(ValidatorForTest6_2_37.validate(self)),
                "6.2.38" => Some(ValidatorForTest6_2_38.validate(self)),
                "6.2.39.1" => None, // Some(ValidatorForTest6_2_39_1.validate(self)),
                "6.2.39.2" => None, // Some(ValidatorForTest6_2_39_2.validate(self)),
                "6.2.39.3" => None, // Some(ValidatorForTest6_2_39_3.validate(self)),
                "6.2.39.4" => None, // Some(ValidatorForTest6_2_39_4.validate(self)),
                "6.2.40" => None,   // Some(ValidatorForTest6_2_40.validate(self)),
                "6.2.41" => Some(ValidatorForTest6_2_41.validate(self)),
                "6.2.42" => None, // Some(ValidatorForTest6_2_42.validate(self)),
                "6.2.43" => None, // Some(ValidatorForTest6_2_43.validate(self)),
                "6.2.44" => None, // Some(ValidatorForTest6_2_44.validate(self)),
                "6.2.45" => None, // Some(ValidatorForTest6_2_45.validate(self)),
                "6.2.46" => None, // Some(ValidatorForTest6_2_46.validate(self)),
                "6.2.47" => None, // Some(ValidatorForTest6_2_47.validate(self)),
                "6.2.48" => Some(ValidatorForTest6_2_48.validate(self)),
                "6.2.49" => None,   // Some(ValidatorForTest6_2_49.validate(self)),
                "6.2.50.1" => None, // Some(ValidatorForTest6_2_50_1.validate(self)),
                "6.2.50.2" => None, // Some(ValidatorForTest6_2_50_2.validate(self)),
                "6.2.50.3" => None, // Some(ValidatorForTest6_2_50_3.validate(self)),
                "6.2.51" => None,   // Some(ValidatorForTest6_2_51.validate(self)),
                "6.2.52" => Some(ValidatorForTest6_2_52.validate(self)),
                "6.2.53" => Some(ValidatorForTest6_2_53.validate(self)),
                _ => None,
            },
        );
        if TestResultStatus::NotFound != recommended_result.status {
            return recommended_result;
        }

        to_test_result(
            test_id,
            Severity::Info,
            match test_id {
                // informative tests
                "6.3.1" => None, // Some(ValidatorForTest6_3_1.validate(self)),
                "6.3.2" => Some(ValidatorForTest6_3_2.validate(self)),
                "6.3.3" => None, // Some(ValidatorForTest6_3_3.validate(self)),
                "6.3.4" => None, // Some(ValidatorForTest6_3_4.validate(self)),
                "6.3.5" => None, // Some(ValidatorForTest6_3_5.validate(self)),
                "6.3.6" => None, // Some(ValidatorForTest6_3_6.validate(self)),
                "6.3.7" => None, // Some(ValidatorForTest6_3_7.validate(self)),
                "6.3.8" => None, // Some(ValidatorForTest6_3_8.validate(self)),
                "6.3.9" => Some(ValidatorForTest6_3_9.validate(self)),
                "6.3.10" => None, // Some(ValidatorForTest6_3_10.validate(self)),
                "6.3.11" => None, // Some(ValidatorForTest6_3_11.validate(self)),
                "6.3.12" => Some(ValidatorForTest6_3_12.validate(self)),
                "6.3.13" => None, // Some(ValidatorForTest6_3_13.validate(self)),
                "6.3.14" => None, // Some(ValidatorForTest6_3_14.validate(self)),
                "6.3.15" => None, // Some(ValidatorForTest6_3_15.validate(self)),
                "6.3.16" => None, // Some(ValidatorForTest6_3_16.validate(self)),
                "6.3.17" => None, // Some(ValidatorForTest6_3_17.validate(self)),
                "6.3.18" => Some(ValidatorForTest6_3_18.validate(self)),
                "6.3.19" => None, // Some(ValidatorForTest6_3_19.validate(self)),
                "6.3.20" => Some(ValidatorForTest6_3_20.validate(self)),
                _ => None,
            },
        )
    }
}

impl RawValidatable for RawDocument<CommonSecurityAdvisoryFramework> {
    fn run_raw_test(&self, test_id: &str) -> TestResult {
        if test_id == "schema" {
            return to_test_result(test_id, Severity::Error, Some(validate_schema_csaf_2_1(self)));
        }

        to_test_result(
            test_id,
            Severity::Warning,
            match test_id {
                "6.2.13" => Some(ValidatorForTest6_2_13.validate(self)),
                "6.2.20" => Some(ValidatorForTest6_2_20.validate(self)),
                _ => None,
            },
        )
    }
}