Checker wishlist (to convert to individual issues)

[terriko]

During our GSoC meeting this week, I mentioned to @SaurabhK122 that we had an older wishlist, but I hadn't updated it lately to see how much of it we covered. Here's the list with the stuff we've covered already removed:

Note: Table below updated as of 2023-10-05 with thanks to @singh-anushka. List of ones still not completed:

1. linux_kernel | New Checker: linux_kernel #223
2. coreclr |  
3. freetype |    New checker: freetype #1043
4. jre |   New checker: Oracle jre (java runtime environment) #1038  
5. pcre |  
6. jasper |   Add checker for jasper #519 and Add checker for jasper #521
7. libxkbcommon |    New checker: libxkbcommon #1041
8. confluence |    
9. guava |  
10. libexif | New checker: libexif #117
11. flexnet_publisher |    
12. lucene |  
13. lcms |  
14. libevent |   New checker: libevent #977
15. libx11 |  New checker: libxkbcommon #1041
16. stagefright |  
17. Calendar |  
18. sql_server |  New checker request: sql server (BEWARE LICENSING ISSUES) #714 (may be hard)
19. System.Net.Http | New checker: System.Net.Http #35
20. httpcomponents-client |    
21. harfbuzz | New checker: Harfbuzz #37
22. jetty | New checker: Jetty #36
23. qcms |    
24. dom4j |  
25. ppp | ihttps://github.com/New checker: ppp #34
26. shadow |  Debian Shadow?

[terriko]

Everything that's been merged is now removed from the table above. I'm going to cherry pick a few more to add as potential new contributor issues and I'll update this list as I do. Anyone else should feel free to do the same and just link to this issue (#709) so they'll show up as related to this list.

[terriko]

Once all individual checkers on this list have been filed as separate issues, this can be closed.

[terriko]

Updating this today to remove some fixed issues and file a few new ones

[singh-anushka]

Can I work on this issue?

[terriko]

Updated with links from #2494 -- thanks @singh-anushka !

[terriko]

I've replaced the section at the top with a list so you can see the statuses and removed ones that were merged. Here's old table just in case we want a record of what was completed although I suppose it's already recorded via commits/issues/the code.

Component	Issue if filed (mouse over for status)
linux_kernel	#223
v8	#1453
coreclr
tcpdump	#850, merged
freetype	#1043
qt	#1044
perl	#226
jre	#1038
libsndfile	#1492
libxslt	#978
pcre
openjpeg	#976
dnsmasq	#2042
jasper	#519 and #521
libxkbcommon	#1041
confluence
guava
junit	#1707
libexif	#117
flexnet_publisher
libvorbis	#2027 , merged
lucene
lcms
wpa_supplicant	#1134, merged but blocked
libevent	#977
libx11	#1041
stagefright
Calendar
commons-compress	#1040
patch	#2044, merged
sql_server	#714 (may be hard)
System.Net.Http	#35
httpcomponents-client
harfbuzz	#37
gdb
jetty	#36
qcms
dom4j
rsync	#29
ppp	ihttps://github.com//issues/34
shadow	Debian Shadow?

[ffontaine]

gdb done with 9c788f9

[terriko]

Thanks, I've removed gdb from the list above.

[yashviradia]

Are there issues here still open? I would like to work on it :)

[terriko]

@yashviradia I think some of these are still available, but it's been a while since the list was updated, so you should check https://github.com/intel/cve-bin-tool/tree/main/cve_bin_tool/checkers before trying to work on any of these. You might also enjoy looking through #2761 if you can;t find anything on this list that looks doable (it's entirely possible that most of what's left here is left because it's really hard to do).

[terriko]

This wishlist is getting pretty old and I think we've done most of the tractable things on it, so I'm going to go ahead and close the issue.