func nodeMatcher()

in cvefeed/nvd/match_node.go [27:69]


func nodeMatcher(ID string, node *schema.NVDCVEFeedJSON10DefNode) (wfn.Matcher, error) {
	if node == nil {
		return nil, fmt.Errorf("%s: node is nil", ID)
	}

	var ms []wfn.Matcher
	for _, match := range node.CPEMatch {
		if match != nil {
			if m, err := cpeMatcher(ID, match); err == nil {
				ms = append(ms, m)
			}
		}
	}
	for _, child := range node.Children {
		if child != nil {
			if m, err := nodeMatcher(ID, child); err == nil {
				ms = append(ms, m)
			}
		}
	}

	if len(ms) == 0 {
		return nil, fmt.Errorf("%s: empty configuration for node", ID)
	}

	var m wfn.Matcher

	switch strings.ToUpper(node.Operator) {
	default:
		flog.Warningf("%s: unknown operator, defaulting to OR: got %q", ID, node.Operator)
		fallthrough
	case "OR":
		m = wfn.MatchAny(ms...)
	case "AND":
		m = wfn.MatchAll(ms...)
	}

	if node.Negate {
		m = wfn.DontMatch(m)
	}

	return m, nil
}