Function get_patches_bulk

vulnerabilities/api_v3.py:474–525

Get introduced and fixed patches

(package_ids, advisory_ids)

def get_patches_bulk(package_ids, advisory_ids):
    """Get introduced and fixed patches"""

    base_qs = ImpactedPackageAffecting.objects.filter(
        package_id__in=package_ids,
        impacted_package__advisory_id__in=advisory_ids,
        impacted_package__advisory__is_latest=True,
        impacted_package__advisory___all_impacts_unfurled_at__isnull=False,
    )

    introduced_rows = base_qs.filter(
        impacted_package__introduced_by_package_commit_patches__isnull=False
    ).values(
        "package_id",
        "impacted_package__advisory_id",
        commit_hash=F("impacted_package__introduced_by_package_commit_patches__commit_hash"),
        vcs_url=F("impacted_package__introduced_by_package_commit_patches__vcs_url"),
    )

    fixed_rows = base_qs.filter(
        impacted_package__fixed_by_package_commit_patches__isnull=False
    ).values(
        "package_id",
        "impacted_package__advisory_id",
        commit_hash=F("impacted_package__fixed_by_package_commit_patches__commit_hash"),
        vcs_url=F("impacted_package__fixed_by_package_commit_patches__vcs_url"),
    )

    introduced_patches_map = defaultdict(list)
    fixed_patches_map = defaultdict(list)

    for row in introduced_rows:
        if row["commit_hash"] or row["vcs_url"]:
            key = (row["package_id"], row["impacted_package__advisory_id"])
            introduced_patches_map[key].append(
                {
                    "commit_hash": row["commit_hash"],
                    "vcs_url": row["vcs_url"],
                }
            )

    for row in fixed_rows:
        if row["commit_hash"] or row["vcs_url"]:
            key = (row["package_id"], row["impacted_package__advisory_id"])
            fixed_patches_map[key].append(
                {
                    "commit_hash": row["commit_hash"],
                    "vcs_url": row["vcs_url"],
                }
            )

    return introduced_patches_map, fixed_patches_map


def build_patch_set_map(patches_map, advisory_ids_by_set):