feat(checker): add apr checker

Signed-off-by: Fabrice Fontaine <[email protected]>
ffontaine · Jan 29, 2025 · b42754a · b42754a
1 parent 3029cb0
commit b42754a
Show file tree

Hide file tree

Showing 7 changed files with 60 additions and 0 deletions.
diff --git a/cve_bin_tool/checkers/__init__.py b/cve_bin_tool/checkers/__init__.py
@@ -28,6 +28,7 @@
     "apache_http_server",
     "apcupsd",
     "apparmor",
+    "apr",
     "asn1c",
     "assimp",
     "asterisk",

diff --git a/cve_bin_tool/checkers/apr.py b/cve_bin_tool/checkers/apr.py
@@ -0,0 +1,23 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for apr
+
+https://www.cvedetails.com/product/17804/Apache-Portable-Runtime.html?vendor_id=45
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class AprChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [
+        r"apr_initialize\r?\n([0-9]+\.[0-9]+\.[0-9]+)",
+        r"([0-9]+\.[0-9]+\.[0-9]+)\r?\n/tmp/apr",
+    ]
+    VENDOR_PRODUCT = [("apache", "portable_runtime")]
diff --git a/test/condensed-downloads/apr-1.7.0-r0.apk.tar.gz b/test/condensed-downloads/apr-1.7.0-r0.apk.tar.gz
diff --git a/test/condensed-downloads/apr-1.7.5-2.fc42.aarch64.rpm.tar.gz b/test/condensed-downloads/apr-1.7.5-2.fc42.aarch64.rpm.tar.gz
diff --git a/test/condensed-downloads/libapr1_1.6.5-1+b1_amd64.deb.tar.gz b/test/condensed-downloads/libapr1_1.6.5-1+b1_amd64.deb.tar.gz
diff --git a/test/condensed-downloads/libapr_1.7.0-2_x86_64.ipk.tar.gz b/test/condensed-downloads/libapr_1.7.0-2_x86_64.ipk.tar.gz
diff --git a/test/test_data/apr.py b/test/test_data/apr.py
@@ -0,0 +1,36 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "portable_runtime",
+        "version": "1.6.5",
+        "version_strings": ["apr_initialize\n1.6.5"],
+    }
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/a/",
+        "package_name": "apr-1.7.5-2.fc42.aarch64.rpm",
+        "product": "portable_runtime",
+        "version": "1.7.5",
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/a/apr/",
+        "package_name": "libapr1_1.6.5-1+b1_amd64.deb",
+        "product": "portable_runtime",
+        "version": "1.6.5",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "libapr_1.7.0-2_x86_64.ipk",
+        "product": "portable_runtime",
+        "version": "1.7.0",
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.11/main/x86_64/",
+        "package_name": "apr-1.7.0-r0.apk",
+        "product": "portable_runtime",
+        "version": "1.7.0",
+    },
+]