26 lines
1.4 KiB
Markdown
26 lines
1.4 KiB
Markdown
# Patch Coverage Tracking
|
|
|
|
## Module
|
|
BinaryIndex
|
|
|
|
## Status
|
|
IMPLEMENTED
|
|
|
|
## Description
|
|
Dedicated patch coverage API endpoint for tracking which CVE patches are covered in binary analysis.
|
|
|
|
## Implementation Details
|
|
- **Modules**: `src/BinaryIndex/StellaOps.BinaryIndex.WebService/Controllers/`
|
|
- **Key Classes**:
|
|
- `PatchCoverageController` (`src/BinaryIndex/StellaOps.BinaryIndex.WebService/Controllers/PatchCoverageController.cs`) - REST API controller for patch coverage queries using `IDeltaSignatureRepository`
|
|
- `DeltaSignatureMatcher` (`src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/DeltaSignatureMatcher.cs`) - matches delta signatures to assess patch coverage
|
|
- `DeltaSigService` / `DeltaSigServiceV2` (`src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/`) - service layer for delta-sig operations
|
|
- **Interfaces**: `IDeltaSignatureRepository` - repository for persisted delta signatures used by patch coverage queries
|
|
|
|
## E2E Test Plan
|
|
- [ ] Query patch coverage API for a known CVE and verify coverage status (covered/not covered)
|
|
- [ ] Verify patch coverage percentage calculation: submit binaries with partial patch coverage
|
|
- [ ] Verify that delta signatures for the CVE fix are used to determine coverage
|
|
- [ ] Verify API returns correct coverage for batch queries across multiple CVEs
|
|
- [ ] Verify coverage tracking updates when new delta signatures are added
|