feat: added Libsrtp checker (#1489)

cve_bin_tool/checkers/__init__.py

@@ -62,6 +62,7 @@
     "libnss",
     "libsndfile",
     "libsoup",
+    "libsrtp",
     "libssh2",
     "libtiff",
     "libvirt",

cve_bin_tool/checkers/libsrtp.py

@@ -0,0 +1,23 @@
+# Copyright (C) 2021 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+"""
+CVE checker for libsrtp
+
+https://www.cvedetails.com/vulnerability-list/vendor_id-16/product_id-26868/version_id-502930/Cisco-Libsrtp--.html
+
+"""
+
+from cve_bin_tool.checkers import Checker
+
+
+class LibsrtpChecker(Checker):
+    CONTAINS_PATTERNS = [
+        r"An implementation of the Secure Real-time Transport Protocol \(SRTP\)",
+        r"This package provides an implementation of the Secure Real-time",
+        r"Transport Protocol \(SRTP\), the Universal Security Transform \(UST\), and",
+        r"a supporting cryptographic kernel\.",
+    ]
+    FILENAME_PATTERNS = [r"libsrtp"]
+    VERSION_PATTERNS = [r"libsrtp[0-9]? ([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("cisco", "libsrtp")]

test/test_data/libsrtp.py

@@ -0,0 +1,19 @@
+mapping_test_data = [
+    {"product": "libsrtp", "version": "1.5.4", "version_strings": ["libsrtp 1.5.4"]},
+    {"product": "libsrtp", "version": "2.3.0", "version_strings": ["libsrtp2 2.3.0"]},
+]
+
+package_test_data = [
+    {
+        "url": "https://rpmfind.net/linux/centos/8-stream/AppStream/aarch64/os/Packages/",
+        "package_name": "libsrtp-1.5.4-8.el8.aarch64.rpm",
+        "product": "libsrtp",
+        "version": "1.5.4",
+    },
+    {
+        "url": "https://rpmfind.net/linux/centos-stream/9-stream/AppStream/aarch64/os/Packages/",
+        "package_name": "libsrtp-2.3.0-7.el9.aarch64.rpm",
+        "product": "libsrtp",
+        "version": "2.3.0",
+    },
+]