hogliux / bomutils Goto Github PK

Many commands on the linux tutorial are native to linux. A Windows tutorial and/or tool package (for cpio and stuff like that) would be very appreciated :-)

Thank you for this great utility!

Unfortunately, commit 704739c introduced a segfault in lsbom, which is triggered verifying any Bom. Even the provided docker image fails to build.

I resolved the issue as follows:

diff --git a/src/lsbom.cpp b/src/lsbom.cpp
index 22d51e7..94fbb90 100644
--- a/src/lsbom.cpp
+++ b/src/lsbom.cpp
@@ -268,7 +268,7 @@ int main(int argc, char *argv[]) {

       DEBUG(2, "BOMVar 0x" << hex << ntohl(var->index) << ' ' << name << ':');

-      if (strstr(name.c_str(),"Paths") == 0) {
+      if (name.rfind("Paths", 0) == 0) {
         BOMPaths *paths = (BOMPaths *)lookup(tree->child);

         typedef map<uint32_t, string> filenames_t;

Passing c_str() pointers to standard library string functions is problematic; the C++ reference says the pointer obtained from c_str() may be invalidated by passing a non-const reference to the string to any standard library function

Coverity Prevent is a great static analyzer for C/C++ (i.e. good checkers, very low false positive rate). Coverity offers free scanning of open source proejcts (https://scan.coverity.com/). There is really no downside to using this service and the potential to catch some surprising defects.

mkbom command not working in AARCH64 process instance.
The command simply getting hung

On Linux/MacOS when running mkbook /source/path /dest/Bom the resulting Bom file is missing all the hidden files (prefixed with .).

Hi,
at the weekend I tried to list the contents of the pre.bom and post.bom of a iOS OTA update file. lsbom just says nothing. I tracked the problem down to line 271:
if (name == "Paths") {
For whatever reason this statement is always false, even if name is indeed "Paths". If I rewrite the statement to
if (strstr(name.c_str(),"Paths") == 0) {
it works and shows the contents of the BOM file. I know this is not a fix, but at least it works for my particular problem.

Regards,
HellG

The BOMPaths depth is currently limited to two level deepness. This should be extended to an infinite amount.

Trying not to be "that guy" who misses the obvious, but is there a project that is recommended as the replacement for bomutils?

For now I'm just starting to get use bomutils for my linux-server based macOS pkg generator.

Hello,

First of all congratulations on this tool.

After generating my first package. I am failing to install it with the installer tool on mac osx.

installer: Error the package path specified was invalid:

Using -verbose does not really help either.

I followed the tutorial and checked the steps carefully.

How can I get more information to help me narrow down where the problem is ?

Regards,
Alfredo Palhares