feat(checker): add toybox checker (#4764)

Signed-off-by: Fabrice Fontaine <[email protected]>
intel · Feb 6, 2025 · dea16ca · dea16ca
1 parent 766011a
commit dea16ca
Show file tree

Hide file tree

Showing 5 changed files with 42 additions and 0 deletions.
diff --git a/cve_bin_tool/checkers/__init__.py b/cve_bin_tool/checkers/__init__.py
@@ -362,6 +362,7 @@
     "timescaledb",
     "tinyproxy",
     "tor",
+    "toybox",
     "tpm2_tss",
     "traceroute",
     "transmission",

diff --git a/cve_bin_tool/checkers/toybox.py b/cve_bin_tool/checkers/toybox.py
@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for toybox
+
+https://www.cvedetails.com/product/117980/Toybox-Project-Toybox.html?vendor_id=27827
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class ToyboxChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"toybox[A-Za-z0-9_%>/ \-\.\r\n]*([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("toybox_project", "toybox")]
diff --git a/test/condensed-downloads/toybox-0.7.7-1-omv4000.aarch64.rpm.tar.gz b/test/condensed-downloads/toybox-0.7.7-1-omv4000.aarch64.rpm.tar.gz
diff --git a/test/condensed-downloads/toybox_0.8.9+dfsg-1.1_amd64.deb.tar.gz b/test/condensed-downloads/toybox_0.8.9+dfsg-1.1_amd64.deb.tar.gz
diff --git a/test/test_data/toybox.py b/test/test_data/toybox.py
@@ -0,0 +1,21 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "toybox", "version": "0.8.9", "version_strings": ["toybox\n0.8.9"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/openmandriva/5.0/repository/aarch64/unsupported/release/",
+        "package_name": "toybox-0.7.7-1-omv4000.aarch64.rpm",
+        "product": "toybox",
+        "version": "0.7.7",
+        "other_products": ["gcc"],
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/t/toybox/",
+        "package_name": "toybox_0.8.9+dfsg-1.1_amd64.deb",
+        "product": "toybox",
+        "version": "0.8.9",
+    },
+]