SCA: Skip binaries with invalid ELF sections

Some of the prebuilt binaries in our packages are compiled for
e.g. Android and other systems, and they should be skipped by SCA.

Signed-off-by: Sergio Durigan Junior <[email protected]>

Author: sergiodj

pkg/sca/sca.go

@@ -92,6 +92,12 @@ var ignoredLibs = []string{
 	"libc.musl-aarch64.so.1",
 }
 
+// List of ELF sections that should not appear in binaries being
+// analyzed by us.  If they do, we can skip the analysis.
+var invalidELFSections = []string {
+	".note.android.ident",
+}
+
 // SCAFS represents the minimum required filesystem accessors which are needed by
 // the SCA engine.
 type SCAFS interface {
@@ -702,6 +708,12 @@ func generateSharedObjectNameDeps(ctx context.Context, hdl SCAHandle, generated
 			log.Debugf("skipping binary %s; unsupported architecture %s", path, ef.Machine.String())
 			return nil
 		}
+		for _, elfSection := range invalidELFSections {
+			if ef.Section(elfSection) != nil {
+				log.Debugf("skipping binary %s; invalid ELF section %v found", path, elfSection)
+				return nil
+			}
+		}
 
 		interp, err := findInterpreter(ef)
 		if err != nil {