feat(checker): add libvpx checker

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -185,6 +185,7 @@
     "libvirt",
     "libvncserver",
     "libvorbis",
+    "libvpx",
     "libxslt",
     "lighttpd",
     "linux_kernel",

cve_bin_tool/checkers/libvpx.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for libvpx
+
+https://www.cvedetails.com/product/62243/Webmproject-Libvpx.html?vendor_id=17610
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class LibvpxChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"WebM Project VP[8|9] Encoder v([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("webmproject", "libvpx")]

test/condensed-downloads/libvpx-1.13.1-1.fc40.aarch64.rpm.tar.gz

@@ -14,7 +14,14 @@
         "package_name": "firefox-106.0.4-1.fc38.aarch64.rpm",
         "product": "firefox",
         "version": "106.0.4",
-        "other_products": ["libjpeg", "libjpeg-turbo", "lz4", "rust", "sqlite"],
+        "other_products": [
+            "libjpeg",
+            "libjpeg-turbo",
+            "libvpx",
+            "lz4",
+            "rust",
+            "sqlite",
+        ],
     },
     {
         "url": "http://ftp.fr.debian.org/debian/pool/main/f/firefox/",

test/condensed-downloads/libvpx1.8_1.8.0-1_x86_64.ipk.tar.gz

@@ -0,0 +1,30 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "libvpx",
+        "version": "1.7.0",
+        "version_strings": ["WebM Project VP8 Encoder v1.7.0"],
+    }
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/l/",
+        "package_name": "libvpx-1.13.1-1.fc40.aarch64.rpm",
+        "product": "libvpx",
+        "version": "1.13.1",
+    },
+    {
+        "url": "http://ftp.fr.debian.org/debian/pool/main/libv/libvpx/",
+        "package_name": "libvpx5_1.7.0-3+deb10u1_amd64.deb",
+        "product": "libvpx",
+        "version": "1.7.0",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "libvpx1.8_1.8.0-1_x86_64.ipk",
+        "product": "libvpx",
+        "version": "1.8.0",
+    },
+]

test/condensed-downloads/libvpx5_1.7.0-3+deb10u1_amd64.deb.tar.gz

@@ -17,6 +17,7 @@
         "other_products": [
             "libjpeg",
             "libjpeg-turbo",
+            "libvpx",
             "lz4",
             "rust",
             "sqlite",
@@ -31,6 +32,7 @@
             "libjpeg",
             "libjpeg-turbo",
             "libvorbis",
+            "libvpx",
             "network_security_services",
             "sqlite",
         ],