fix: improve libarchive checker

freebsd:libarchive is a valid CPE ID While at it, add an openwrt test package Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>
intel · Jan 11, 2023 · f0703cc · f0703cc
1 parent 5ce7111
commit f0703cc
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 1 deletion.
diff --git a/cve_bin_tool/checkers/libarchive.py b/cve_bin_tool/checkers/libarchive.py
@@ -5,6 +5,7 @@
 """
 CVE checker for libarchive
 
+https://www.cvedetails.com/product/11632/Freebsd-Libarchive.html?vendor_id=6
 https://www.cvedetails.com/product/26168/Libarchive-Libarchive.html?vendor_id=12872
 
 """
@@ -17,4 +18,4 @@ class LibarchiveChecker(Checker):
     CONTAINS_PATTERNS: list[str] = []
     FILENAME_PATTERNS = [r"libarchive.so"]
     VERSION_PATTERNS = [r"libarchive ([0-9]+\.[0-9]+\.[0-9]+)"]
-    VENDOR_PRODUCT = [("libarchive", "libarchive")]
+    VENDOR_PRODUCT = [("freebsd", "libarchive"), ("libarchive", "libarchive")]
diff --git a/test/condensed-downloads/libarchive_3.4.2-1_x86_64.ipk.tar.gz b/test/condensed-downloads/libarchive_3.4.2-1_x86_64.ipk.tar.gz
diff --git a/test/test_data/libarchive.py b/test/test_data/libarchive.py
@@ -33,4 +33,10 @@
         "product": "libarchive",
         "version": "3.4.3",
     },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "libarchive_3.4.2-1_x86_64.ipk",
+        "product": "libarchive",
+        "version": "3.4.2",
+    },
 ]