File CVE-2022-3500.patch of Package keylime

Overview Repositories Revisions Requests Users Attributes Meta

File CVE-2022-3500.patch of Package keylime

From 522ff1050a196d55cc214258593613d65d6701bd Mon Sep 17 00:00:00 2001
From: George Almasi <gheorghe@us.ibm.com>
Date: Sat, 8 Oct 2022 14:10:00 +0000
Subject: [PATCH 1/3] Proper exception handling in tornado_requests

Signed-off-by: George Almasi <gheorghe@us.ibm.com>
---
 keylime/tornado_requests.py | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

Index: keylime-v6.3.2/keylime/tornado_requests.py
===================================================================
--- keylime-v6.3.2.orig/keylime/tornado_requests.py
+++ keylime-v6.3.2/keylime/tornado_requests.py
@@ -43,14 +43,17 @@ async def request(method, url, params=No
     except httpclient.HTTPError as e:
         if e.response is None:
             return TornadoResponse(500, str(e))
-
         return TornadoResponse(e.response.code, e.response.body)
     except ConnectionError as e:
         return TornadoResponse(599, f"Connection error: {str(e)}")
     except ssl.SSLError as e:
         return TornadoResponse(599, f"SSL connection error: {str(e)}")
+    except OSError as e:
+        return TornadoResponse(599, f"TCP/IP Connection error: {str(e)}")
+    except Exception as e:
+        return TornadoResponse(599, f"General communication failure: {str(e)}")
     if response is None:
-        return None
+        return TornadoResponse(599, "Unspecified failure in tornado (empty http response)")
     return TornadoResponse(response.code, response.body)

Places

File CVE-2022-3500.patch of Package keylime

Places