feat(checker): add gzip checker (#2998)

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -98,6 +98,7 @@
     "gstreamer",
     "gupnp",
     "gvfs",
+    "gzip",
     "haproxy",
     "harfbuzz",
     "haserl",

cve_bin_tool/checkers/gzip.py

@@ -0,0 +1,24 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for gzip
+
+https://www.cvedetails.com/product/1670/GNU-Gzip.html?vendor_id=72
+https://www.cvedetails.com/product/8772/Gzip-Gzip.html?vendor_id=5134
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class GzipChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [
+        r"file size changed while zipping\r?\n([0-9]+\.[0-9]+)",
+        r"Written by Jean-loup Gailly.[a-zA-Z0-9:%,' \-\.\r\n]*\r?\n([0-9]+\.[0-9]+)",
+    ]
+    VENDOR_PRODUCT = [("gnu", "gzip"), ("gzip", "gzip")]

test/condensed-downloads/gzip-1.12-3.6.i586.rpm.tar.gz

@@ -0,0 +1,35 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "gzip",
+        "version": "1.10",
+        "version_strings": ["file size changed while zipping\n1.10"],
+    },
+    {
+        "product": "gzip",
+        "version": "1.10",
+        "version_strings": ["Written by Jean-loup Gailly.\n1.10"],
+    },
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/opensuse/ports/i586/tumbleweed/repo/oss/i586/",
+        "package_name": "gzip-1.12-3.6.i586.rpm",
+        "product": "gzip",
+        "version": "1.12",
+    },
+    {
+        "url": "http://ftp.fr.debian.org/debian/pool/main/g/gzip/",
+        "package_name": "gzip_1.9-3+deb10u1_amd64.deb",
+        "product": "gzip",
+        "version": "1.9",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "gzip_1.10-2_x86_64.ipk",
+        "product": "gzip",
+        "version": "1.10",
+    },
+]