Merge ~litios/ubuntu-cve-tracker:source_map/broken-built-using into ubuntu-cve-tracker:master

[David Fernandez Gonzalez]

There is an issue when trying to load the built-using information from mantic due to the helvum package, as it carries a modified version of dh-cargo that generated wrong entries for the X-Cargo-Built-Using tag.

This change takes care of the issue by adding an error handler.

[Eduardo Barretto (ebarretto)]

lgtm, thanks!

review: Approve

diff --git a/scripts/source_map.py b/scripts/source_map.py
index 58ef5c3..9f3c66b 100755
--- a/scripts/source_map.py
+++ b/scripts/source_map.py
@@ -321,9 +321,14 @@ def load_built_using_collection(pmap, releases=None, component=None):
                     if pmap[rel][pkg]['pocket'] != '':
                         pocket += "-%s" % pmap[rel][pkg]['pocket']
 
-                    for (s, c, v) in map(lambda x: x.split(' ', 3),
+                    for pkg_cmp_ver in map(lambda x: x.split(' ', 3),
                                         pmap[rel][pkg][tag]):
-                        v = v.rstrip(')')
+                        if len(pkg_cmp_ver) != 3:
+                            print('WARN: Skipping invalid entry (', pkg_cmp_ver, ') for', rel, pkg, 'with tag', tag)
+                            continue
+
+                        s = pkg_cmp_ver[0]
+                        v = pkg_cmp_ver[2].rstrip(')')
                         if s not in built_using:
                             built_using[s] = dict()
                         if v not in built_using[s]: