feat(checker): new vim checker>

cve_bin_tool/checkers/__init__.py

@@ -287,6 +287,7 @@
     "varnish",
     "vorbis_tools",
     "vsftpd",
+    "vim",
     "webkitgtk",
     "wget",
     "wireshark",

cve_bin_tool/checkers/vim.py

@@ -0,0 +1,26 @@
+# Copyright (C) 2023 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for vim:
+
+https://www.cvedetails.com/vulnerability-list/vendor_id-8218/product_id-14270/Vim-Vim.html
+
+"""
+
+from cve_bin_tool.checkers import Checker
+
+
+class VimChecker(Checker):
+    CONTAINS_PATTERNS = [
+        r"# This viminfo file was generated by Vim %s.",
+        r"-u <vimrc>            Use <vimrc> instead of any .vimrc",
+        r"- append vim.VIM_SPECIAL_PATH to sys.path",
+    ]
+    FILENAME_PATTERNS = [r"vim"]
+    VERSION_PATTERNS = [
+        r"vim-([0-9]+\.[0-9]+\.[0-9]{4})",
+        r"VIM - Vi IMproved ([0-9]\.[0-9] (?:\([1-9]\d{3,} [A-Z][a-z]{2} [0-9]{1,2}\))?)",
+    ]
+    VENDOR_PRODUCT = [("vim", "vim")]

test/test_checkers.py

@@ -111,6 +111,8 @@ def setup_class(cls):
             ("syslogng", "syslog-ng.so", ["syslog-ng"]),
             ("systemd", "libsystemd.so.0", ["systemd"]),
             ("varnish", "varnish", ["varnish"]),
+            ("vim", "vim", ["vim"]),
+            ("vim", "vim-enhanced", ["vim"]),
             ("wireshark", "rawshark", ["wireshark"]),
             ("xerces", "libxerces-c.so", ["xerces"]),
             ("xml2", "libxml2.so.0", ["xml2"]),

test/test_data/vim.py

@@ -0,0 +1,44 @@
+# Copyright (C) 2023 Intel Corporation
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "vim",
+        "version": "9.0.1429",
+        "version_strings": ["vim-9.0.1429"],
+    },
+    {
+        "product": "vim",
+        "version": "8.2.2434",
+        "version_strings": ["vim-8.2.2434"],
+    },
+    {
+        "product": "vim",
+        "version": "8.1.2269",
+        "version_strings": [
+            "vim-8.1.2269",
+            "E136: viminfo: Too many errors, skipping rest of file",
+        ],
+    },
+]
+package_test_data = [
+    {
+        "url": "https://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/aarch64/os/Packages/v/",
+        "package_name": "vim-enhanced-9.0.1429-1.fc38.aarch64.rpm",
+        "product": "vim",
+        "version": "9.0.1429",
+        "other_products": ["lua"],
+    },
+    {
+        "url": "http://ftp.de.debian.org/debian/pool/main/v/vim/",
+        "package_name": "vim_8.2.2434-3+deb11u1_amd64.deb",
+        "product": "vim",
+        "version": "8.2.2434",
+    },
+    {
+        "url": "http://archive.ubuntu.com/ubuntu/pool/main/v/vim/",
+        "package_name": "vim_8.1.2269-1ubuntu5_amd64.deb",
+        "product": "vim",
+        "version": "8.1.2269",
+    },
+]