fix: update busybox checker (#4679)

Update busybox pattern to catch version 1.00 which has been released in 2004 but is still encountered on some embedded systems ... Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>
intel · Jan 8, 2025 · d2519c1 · d2519c1
1 parent a72b30d
commit d2519c1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/cve_bin_tool/checkers/busybox.py b/cve_bin_tool/checkers/busybox.py
@@ -20,5 +20,5 @@ class BusyboxChecker(Checker):
         # r"BusyBox is copyrighted by many authors between 1998-2015.",
     ]
     FILENAME_PATTERNS = [r"busybox"]
-    VERSION_PATTERNS = [r"BusyBox v([0-9]+\.[0-9]+\.[0-9]+)"]
+    VERSION_PATTERNS = [r"BusyBox v([0-9]+\.[0-9]+(\.[0-9]+)?)"]
     VENDOR_PRODUCT = [("busybox", "busybox")]
diff --git a/test/test_data/busybox.py b/test/test_data/busybox.py
@@ -2,7 +2,8 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 
 mapping_test_data = [
-    {"product": "busybox", "version": "1.18.3", "version_strings": ["BusyBox v1.18.3"]}
+    {"product": "busybox", "version": "1.18.3", "version_strings": ["BusyBox v1.18.3"]},
+    {"product": "busybox", "version": "1.00", "version_strings": ["BusyBox v1.00"]},
 ]
 package_test_data = [
     {