feat(checker): add libgd checker (#2978)

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -136,6 +136,7 @@
     "libdb",
     "libebml",
     "libgcrypt",
+    "libgd",
     "libgit2",
     "libical",
     "libidn2",

cve_bin_tool/checkers/libgd.py

@@ -0,0 +1,26 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for libgd
+
+https://www.cvedetails.com/product/11233/Libgd-Libgd.html?vendor_id=6668
+https://www.cvedetails.com/product/11517/Libgd-Gd-Graphics-Library.html?vendor_id=6668
+https://www.cvedetails.com/product/117883/Gd-Graphics-Library-Project-Gd-Graphics-Library.html?vendor_id=27800
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class LibgdChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"gd-tga:[a-zA-Z,'%!. \-\r\n]*([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [
+        ("libgd", "libgd"),
+        ("libgd", "gd_graphics_library"),
+        ("gd_graphics_library_project", "gd_graphics_library"),
+    ]

test/condensed-downloads/libgd3-2.3.3-6.mga9.armv7hl.rpm.tar.gz

@@ -0,0 +1,30 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "libgd",
+        "version": "2.2.5",
+        "version_strings": ["gd-tga: premature end of image data\n2.2.5"],
+    }
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/mageia/distrib/cauldron/armv7hl/media/core/release/",
+        "package_name": "libgd3-2.3.3-6.mga9.armv7hl.rpm",
+        "product": "libgd",
+        "version": "2.3.3",
+    },
+    {
+        "url": "http://ftp.fr.debian.org/debian/pool/main/libg/libgd2/",
+        "package_name": "libgd3_2.2.5-5.2_amd64.deb",
+        "product": "libgd",
+        "version": "2.2.5",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "libgd_2.2.5-2_x86_64.ipk",
+        "product": "libgd",
+        "version": "2.2.5",
+    },
+]