fix: update openjpeg checker

Update openjpeg pattern to catch version on debian and alpine packages Signed-off-by: Fabrice Fontaine <[email protected]>
ffontaine · Jan 28, 2025 · 4736994 · 4736994
1 parent 3029cb0
commit 4736994
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 0 deletions.
diff --git a/cve_bin_tool/checkers/openjpeg.py b/cve_bin_tool/checkers/openjpeg.py
@@ -27,5 +27,6 @@ class OpenjpegChecker(Checker):
     VERSION_PATTERNS = [
         r"openjpeg-([0-9]+\.[0-9]+\.[0-9]+)",
         r"openjpeg2-([0-9]+\.[0-9]+\.[0-9]+)",
+        r"([0-9]+\.[0-9]+\.[0-9]+)[A-Za-z/ \.\r\n]*(?:opj_setup_decoder|openjp2)",
     ]
     VENDOR_PRODUCT = [("uclouvain", "openjpeg")]
diff --git a/test/condensed-downloads/libopenjp2-7_2.5.0-2_arm64.deb.tar.gz b/test/condensed-downloads/libopenjp2-7_2.5.0-2_arm64.deb.tar.gz
diff --git a/test/condensed-downloads/openjpeg-2.4.0-r1.apk.tar.gz b/test/condensed-downloads/openjpeg-2.4.0-r1.apk.tar.gz
diff --git a/test/test_data/openjpeg.py b/test/test_data/openjpeg.py
@@ -24,4 +24,16 @@
         "product": "openjpeg",
         "version": "2.1.0",
     },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/o/openjpeg2/",
+        "package_name": "libopenjp2-7_2.5.0-2_arm64.deb",
+        "product": "openjpeg",
+        "version": "2.5.0",
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.11/main/x86_64/",
+        "package_name": "openjpeg-2.4.0-r1.apk",
+        "product": "openjpeg",
+        "version": "2.4.0",
+    },
 ]