feat(checker): add rtmpdump (#2649)

Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>
intel · Feb 6, 2023 · 02e4438 · 02e4438
1 parent 16a8d02
commit 02e4438
Show file tree

Hide file tree

Showing 5 changed files with 43 additions and 0 deletions.
diff --git a/cve_bin_tool/checkers/__init__.py b/cve_bin_tool/checkers/__init__.py
@@ -228,6 +228,7 @@
     "raptor",
     "rdesktop",
     "rtl_433",
+    "rtmpdump",
     "rsync",
     "rsyslog",
     "rust",

diff --git a/cve_bin_tool/checkers/rtmpdump.py b/cve_bin_tool/checkers/rtmpdump.py
@@ -0,0 +1,20 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for rtmpdump
+
+https://www.cvedetails.com/product/37077/Rtmpdump-Project-Rtmpdump.html?vendor_id=16341
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class RtmpdumpChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"v([0-9]+\.[0-9]+)\r?\nRTMP"]
+    VENDOR_PRODUCT = [("rtmpdump_project", "rtmpdump")]
diff --git a/test/condensed-downloads/rtmpdump-2.4-22.20190330.gitc5f04a5.fc37.aarch64.rpm.tar.gz b/test/condensed-downloads/rtmpdump-2.4-22.20190330.gitc5f04a5.fc37.aarch64.rpm.tar.gz
diff --git a/test/condensed-downloads/rtmpdump_2.4%2B20151223.gitfa8646d.1-1%2Bb1_amd64.deb.tar.gz b/test/condensed-downloads/rtmpdump_2.4%2B20151223.gitfa8646d.1-1%2Bb1_amd64.deb.tar.gz
diff --git a/test/test_data/rtmpdump.py b/test/test_data/rtmpdump.py
@@ -0,0 +1,22 @@
+# Copyright (C) 2023 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "rtmpdump", "version": "2.4", "version_strings": ["v2.4\nRTMPDump"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/rpmfusion/free/fedora/development/rawhide/Everything/aarch64/os/Packages/r/",
+        "package_name": "rtmpdump-2.4-22.20190330.gitc5f04a5.fc37.aarch64.rpm",
+        "product": "rtmpdump",
+        "version": "2.4",
+        "other_products": [],
+    },
+    {
+        "url": "http://ftp.fr.debian.org/debian/pool/main/r/rtmpdump/",
+        "package_name": "rtmpdump_2.4%2B20151223.gitfa8646d.1-1%2Bb1_amd64.deb",
+        "product": "rtmpdump",
+        "version": "2.4",
+        "other_products": [],
+    },
+]