feat(checker): add corosync checker (#5158)

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -65,6 +65,7 @@
     "commons_compress",
     "connman",
     "coreutils",
+    "corosync",
     "cpio",
     "cpp_httplib",
     "cronie",

cve_bin_tool/checkers/corosync.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for corosync
+
+https://www.cvedetails.com/product/27835/Corosync-Corosync.html?vendor_id=13388
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class CorosyncChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"([0-9]+\.[0-9]+\.[0-9]+)[a-zA-Z_/%: \.\r\n]*corosync"]
+    VENDOR_PRODUCT = [("corosync", "corosync")]

test/condensed-downloads/corosync-3.1.9-3.fc43.aarch64.rpm.tar.gz

@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "corosync", "version": "3.1.9", "version_strings": ["3.1.9\ncorosync"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/c/",
+        "package_name": "corosync-3.1.9-3.fc43.aarch64.rpm",
+        "product": "corosync",
+        "version": "3.1.9",
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/c/corosync/",
+        "package_name": "corosync_3.0.1-2+deb10u1_amd64.deb",
+        "product": "corosync",
+        "version": "3.0.1",
+    },
+]