hogliux / bomutils Goto Github PK

The BOMPaths depth is currently limited to two level deepness. This should be extended to an infinite amount.

Hi,
at the weekend I tried to list the contents of the pre.bom and post.bom of a iOS OTA update file. lsbom just says nothing. I tracked the problem down to line 271:
if (name == "Paths") {
For whatever reason this statement is always false, even if name is indeed "Paths". If I rewrite the statement to
if (strstr(name.c_str(),"Paths") == 0) {
it works and shows the contents of the BOM file. I know this is not a fix, but at least it works for my particular problem.

Regards,
HellG

Hello,

First of all congratulations on this tool.

After generating my first package. I am failing to install it with the installer tool on mac osx.

installer: Error the package path specified was invalid:

Using -verbose does not really help either.

I followed the tutorial and checked the steps carefully.

How can I get more information to help me narrow down where the problem is ?

Regards,
Alfredo Palhares

mkbom command not working in AARCH64 process instance.
The command simply getting hung

Trying not to be "that guy" who misses the obvious, but is there a project that is recommended as the replacement for bomutils?

For now I'm just starting to get use bomutils for my linux-server based macOS pkg generator.

Coverity Prevent is a great static analyzer for C/C++ (i.e. good checkers, very low false positive rate). Coverity offers free scanning of open source proejcts (https://scan.coverity.com/). There is really no downside to using this service and the potential to catch some surprising defects.

Thank you for this great utility!

Unfortunately, commit 704739c introduced a segfault in lsbom, which is triggered verifying any Bom. Even the provided docker image fails to build.

I resolved the issue as follows:

diff --git a/src/lsbom.cpp b/src/lsbom.cpp
index 22d51e7..94fbb90 100644
--- a/src/lsbom.cpp
+++ b/src/lsbom.cpp
@@ -268,7 +268,7 @@ int main(int argc, char *argv[]) {

       DEBUG(2, "BOMVar 0x" << hex << ntohl(var->index) << ' ' << name << ':');

-      if (strstr(name.c_str(),"Paths") == 0) {
+      if (name.rfind("Paths", 0) == 0) {
         BOMPaths *paths = (BOMPaths *)lookup(tree->child);

         typedef map<uint32_t, string> filenames_t;

Passing c_str() pointers to standard library string functions is problematic; the C++ reference says the pointer obtained from c_str() may be invalidated by passing a non-const reference to the string to any standard library function

Many commands on the linux tutorial are native to linux. A Windows tutorial and/or tool package (for cpio and stuff like that) would be very appreciated :-)

On Linux/MacOS when running mkbook /source/path /dest/Bom the resulting Bom file is missing all the hidden files (prefixed with .).