fix: update lz4 pattern for android

Add pattern to detect lz4 version in Android libraries.

- Add FILENAME_PATTERNS to match liblz4 library files
- Update VERSION_PATTERN to handle null byte separators (API 28)
- Add generic ERROR_* pattern for API 30/34 format
- Add test cases for Android lz4 formats

Tested on Android API 28, 29, 30, 34

Partial fix for #5441

Author: jackulau

cve_bin_tool/checkers/lz4.py

@@ -19,7 +19,7 @@ class Lz4Checker(Checker):
     FILENAME_PATTERNS: list[str] = [r"liblz4"]
     VERSION_PATTERNS = [
         r"lz4-([0-9]+\.[0-9]+\.[0-9]+)",
-        r"([0-9]+\.[0-9]+\.[0-9]+)\r?\nUnspecified error code\r?\nOK_NoError",
+        r"([0-9]+\.[0-9]+\.[0-9]+)[\x00\r\n]+Unspecified error code[\x00\r\n]+OK_NoError",
         r"ERROR_[a-zA-Z_]+[\x00\s]+([0-9]+\.[0-9]+\.[0-9]+)[\x00\s]+ERROR_[a-zA-Z_]+",
     ]
     VENDOR_PRODUCT = [("lz4_project", "lz4"), ("yann_collet", "lz4")]

test/test_data/lz4.py

@@ -8,6 +8,11 @@
         "version": "1.9.3",
         "version_strings": ["1.9.3\nUnspecified error code\nOK_NoError"],
     },
+    {
+        "product": "lz4",
+        "version": "1.7.5",
+        "version_strings": ["1.7.5\x00Unspecified error code\x00OK_NoError"],
+    },
     {
         "product": "lz4",
         "version": "1.8.3",