#!/bin/sh
# Nico Golde <nion@debian.org>
# Latest change: Do Sep 20 20:13:19 CEST 2007
# extract TODO items for unfixed security issues in unstable/testing

DATA="../data/CVE/list"
TMP="list.tmp"

:> $TMP

awk "BEGIN { RS = \"CVE-\" } /<unfixed>/" $DATA > $TMP

while read LINE; do

    case "$LINE" in
    *\-*\ \(*...\))
        CVE="CVE-$( echo "$LINE" | cut -d ' ' -f 1 )"
        ;;
    *NOTE:*) ;;
    *\[etch\]*) ;;
    *\[sarge\]*) ;;
    *\<unfixed\>*)
        # output unimportant issues with -v
        if [ ! "$1" = "-v" ]; then
            STATUS="$( echo "$LINE" | grep -e '(*unimportant)*' )"
            if [ "x$STATUS" = "x$LINE" ]; then
                continue
            fi
        fi

        PKG="$( echo "$LINE" | sed -e 's/.*- \(.\+\)\ <unfixed>.*/\1/' )"
        BUG="$( echo "$LINE" | sed -e 's/.*bug\ #\([0-9]\+\).*/\1/' )"

        if [ "x$BUG" = "x" -o "x$BUG" = "x$LINE" ]; then
            TODO="TODO: report bug"
            echo "$CVE" "$PKG" "$TODO"
        else
            TODO="$( ./get-bug-status "$BUG" )"
            echo "$CVE" "$PKG" "$BUG" "$TODO"
        fi
        ;;
    *) ;;
    esac

done < $TMP

rm -f $TMP