stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
4bdc298ec1fc821ee0d9dda6d2d4643dcedf6b35
git.stella-ops.org/docs/features/unchecked/binaryindex/patch-coverage-tracking.md

1.4 KiB
Raw Blame History

Patch Coverage Tracking

Module

BinaryIndex

Status

IMPLEMENTED

Description

Dedicated patch coverage API endpoint for tracking which CVE patches are covered in binary analysis.

Implementation Details

  • Modules: src/BinaryIndex/StellaOps.BinaryIndex.WebService/Controllers/
  • Key Classes:
    • PatchCoverageController (src/BinaryIndex/StellaOps.BinaryIndex.WebService/Controllers/PatchCoverageController.cs) - REST API controller for patch coverage queries using IDeltaSignatureRepository
    • DeltaSignatureMatcher (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/DeltaSignatureMatcher.cs) - matches delta signatures to assess patch coverage
    • DeltaSigService / DeltaSigServiceV2 (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/) - service layer for delta-sig operations
  • Interfaces: IDeltaSignatureRepository - repository for persisted delta signatures used by patch coverage queries

E2E Test Plan

  • Query patch coverage API for a known CVE and verify coverage status (covered/not covered)
  • Verify patch coverage percentage calculation: submit binaries with partial patch coverage
  • Verify that delta signatures for the CVE fix are used to determine coverage
  • Verify API returns correct coverage for batch queries across multiple CVEs
  • Verify coverage tracking updates when new delta signatures are added