fix: rename expat checker

Rename expat checker to libexpat to make it more clear that the checker extracts libexpat version Fix intel#1694 Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>
ffontaine · Aug 15, 2023 · 2be8a42 · 2be8a42
1 parent e0fe54a
commit 2be8a42
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 9 deletions.
diff --git a/cve_bin_tool/checkers/README.md b/cve_bin_tool/checkers/README.md
@@ -342,7 +342,7 @@ $ sqlite3 ~/.cache/cve-bin-tool/cve.db \
 VPkg: apple, mac_os_x
 VPkg: canonical, ubuntu_linux
 VPkg: debian, debian_linux
-VPkg: libexpat, expat
+VPkg: libexpat_project, libexpat
 VPkg: mozilla, firefox
 VPkg: opensuse, leap
 VPkg: suse, linux_enterprise_debuginfo
@@ -351,8 +351,8 @@ VPkg: suse, linux_enterprise_debuginfo
 `VENDOR_PRODUCT` attribute should have list of tuples of vendor product pair
 found in the listings. Some of the listings will be with regards to products
 that include this product. For our example all listings except
-`libexpat, expat` merely include the target product (`expat` for the
-example SQL query).
+`libexpat_project, libexpat` merely include the target product (`libexpat` for
+the example SQL query).
 
 ## Helper-Script
 

diff --git a/cve_bin_tool/checkers/__init__.py b/cve_bin_tool/checkers/__init__.py
@@ -72,7 +72,6 @@
     "emacs",
     "exim",
     "exiv2",
-    "expat",
     "f2fs_tools",
     "faad2",
     "fastd",
@@ -140,6 +139,7 @@
     "libcurl",
     "libdb",
     "libebml",
+    "libexpat",
     "libgcrypt",
     "libgd",
     "libgit2",

diff --git a/cve_bin_tool/checkers/expat.py → cve_bin_tool/checkers/libexpat.py b/cve_bin_tool/checkers/expat.py → cve_bin_tool/checkers/libexpat.py
@@ -29,13 +29,12 @@
 from cve_bin_tool.checkers import Checker
 
 
-class ExpatChecker(Checker):
-    # FIXME: fix contains pattern
+class LibexpatChecker(Checker):
     CONTAINS_PATTERNS = [
         r"reserved prefix (xml) must not be undeclared or bound to another namespace name",
         r"cannot change setting once parsing has begun",
         "requested feature requires XML_DTD support in Expat",
     ]
-    FILENAME_PATTERNS = [r"expat"]
+    FILENAME_PATTERNS = [r"libexpat.so"]
     VERSION_PATTERNS = [r"expat_([012]+\.[0-9]+\.[0-9]+)"]
     VENDOR_PRODUCT = [("libexpat_project", "libexpat")]
diff --git a/cve_bin_tool/cli.py b/cve_bin_tool/cli.py
@@ -12,7 +12,7 @@
 
 """
 This tool scans for a number of common, vulnerable open source components
-(openssl, libpng, libxml2, expat and a few others) to let you know if your
+(openssl, libpng, libxml2, libexpat and a few others) to let you know if your
 system includes common libraries with known vulnerabilities.  It emits a list
 of CVE numbers that may be relevant to your binary based on the versions.
 There is a flag to enable information about backported fixes for specific
@@ -103,7 +103,7 @@ def main(argv=None):
         description=textwrap.dedent(
             """
             The CVE Binary Tool scans for a number of common, vulnerable open source
-            components (openssl, libpng, libxml2, expat and a few others) to let you know
+            components (openssl, libpng, libxml2, libexpat and a few others) to let you know
             if a given directory or binary file includes common libraries with known
             vulnerabilities.
             """

diff --git a/test/test_data/expat.py → test/test_data/libexpat.py b/test/test_data/expat.py → test/test_data/libexpat.py