feat(checker): add openocd checker (#5280)

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -315,6 +315,7 @@
     "openimageio",
     "openjpeg",
     "openldap",
+    "openocd",
     "opensc",
     "openssh",
     "openssl",

cve_bin_tool/checkers/openocd.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for openocd
+
+https://www.cvedetails.com/product/43136/Openocd-Open-On-chip-Debugger.html?vendor_id=17563
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class OpenocdChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"Open On-Chip Debugger ([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("openocd", "open_on-chip_debugger")]

test/condensed-downloads/openocd-0.12.0-4.fc40.aarch64.rpm.tar.gz

@@ -0,0 +1,30 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {
+        "product": "open_on-chip_debugger",
+        "version": "0.11.0",
+        "version_strings": ["Open On-Chip Debugger 0.11.0"],
+    }
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/releases/41/Everything/aarch64/os/Packages/o/",
+        "package_name": "openocd-0.12.0-4.fc40.aarch64.rpm",
+        "product": "open_on-chip_debugger",
+        "version": "0.12.0",
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/o/openocd/",
+        "package_name": "openocd_0.11.0~rc2-1_amd64.deb",
+        "product": "open_on-chip_debugger",
+        "version": "0.11.0",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "openocd_v0.10.0-2_x86_64.ipk",
+        "product": "open_on-chip_debugger",
+        "version": "0.10.0",
+    },
+]