Skip to content

Commit 56a5fc7

Browse files
authored
fix: update openjpeg checker (#4727)
Update openjpeg pattern to catch version on debian and alpine packages Signed-off-by: Fabrice Fontaine <[email protected]>
1 parent e1c0bb2 commit 56a5fc7

File tree

4 files changed

+18
-2
lines changed

4 files changed

+18
-2
lines changed

cve_bin_tool/checkers/openjpeg.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,6 @@ class OpenjpegChecker(Checker):
2626
]
2727
VERSION_PATTERNS = [
2828
r"openjpeg-([0-9]+\.[0-9]+\.[0-9]+)",
29-
r"openjpeg2-([0-9]+\.[0-9]+\.[0-9]+)",
29+
r"([0-9]+\.[0-9]+\.[0-9]+)[A-Za-z/ \.\r\n]*(?:opj_setup_decoder|openjp2)",
3030
]
3131
VENDOR_PRODUCT = [("uclouvain", "openjpeg")]
Binary file not shown.
Binary file not shown.

test/test_data/openjpeg.py

+17-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,11 @@
33

44
mapping_test_data = [
55
{"product": "openjpeg", "version": "1.5.1", "version_strings": ["openjpeg-1.5.1"]},
6-
{"product": "openjpeg", "version": "2.1.0", "version_strings": ["openjpeg2-2.1.0"]},
6+
{
7+
"product": "openjpeg",
8+
"version": "2.1.0",
9+
"version_strings": ["2.1.0\nopj_setup_decoder"],
10+
},
711
]
812
package_test_data = [
913
{
@@ -24,4 +28,16 @@
2428
"product": "openjpeg",
2529
"version": "2.1.0",
2630
},
31+
{
32+
"url": "http://ftp.debian.org/debian/pool/main/o/openjpeg2/",
33+
"package_name": "libopenjp2-7_2.5.0-2_arm64.deb",
34+
"product": "openjpeg",
35+
"version": "2.5.0",
36+
},
37+
{
38+
"url": "https://dl-cdn.alpinelinux.org/alpine/v3.11/main/x86_64/",
39+
"package_name": "openjpeg-2.4.0-r1.apk",
40+
"product": "openjpeg",
41+
"version": "2.4.0",
42+
},
2743
]

0 commit comments

Comments
 (0)