feat(checker): add erlang/otp (#5298)

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -103,6 +103,7 @@
     "elfutils",
     "enscript",
     "emacs",
+    "erlang_otp",
     "exfatprogs",
     "exim",
     "exiv2",

cve_bin_tool/checkers/erlang_otp.py

@@ -0,0 +1,24 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for Erlang OTP
+
+https://www.cvedetails.com/product/20874/Erlang-Erlang-otp.html?vendor_id=9446
+https://www.cvedetails.com/product/33599/Erlang-OTP.html?vendor_id=9446
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class ErlangOtpChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [
+        r"([0-9]+\.[0-9]+(\.[0-9]+)?(\.[0-9]+)?)\r?\nErlang/OTP",
+        r"Erlang/OTP[a-z0-9%: \.\-\[\]]*\r?\n([0-9]+\.[0-9]+(\.[0-9]+)?(\.[0-9]+)?)",
+    ]
+    VENDOR_PRODUCT = [("erlang", "erlang\\/otp"), ("erlang", "otp")]

test/condensed-downloads/erlang-24.3.4.6-r0.apk.tar.gz

@@ -0,0 +1,33 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "otp", "version": "22.0.2", "version_strings": ["22.0.2\nErlang/OTP"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/opensuse/ports/aarch64/tumbleweed/repo/oss/aarch64/",
+        "package_name": "erlang-27.3.4-1.1.aarch64.rpm",
+        "product": "erlang\\/otp",
+        "version": "27.3.4",
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/e/erlang/",
+        "package_name": "erlang-base_23.2.6%2Bdfsg-1%2Bdeb11u1_amd64.deb",
+        "product": "erlang\\/otp",
+        "version": "23.2.6",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "erlang_21.0-3_x86_64.ipk",
+        "product": "erlang\\/otp",
+        "version": "21.0",
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.16/community/x86/",
+        "package_name": "erlang-24.3.4.6-r0.apk",
+        "product": "erlang\\/otp",
+        "version": "24.3.4.6",
+        "other_products": ["gcc"],
+    },
+]