fix: update lz4 pattern for android

Add pattern to detect lz4 version in Android libraries where the
version string format differs from standard Linux binaries.

- Add FILENAME_PATTERNS to match liblz4 library files
- Add VERSION_PATTERN to match Android format where version appears
  between ERROR_* strings (works across API 30 and API 34)
- Add test cases for Android lz4 format (API 30: 1.8.3, API 34: 1.9.4)

Partial fix for #5441

Author: jackulau

cve_bin_tool/checkers/lz4.py

@@ -16,9 +16,10 @@
 
 class Lz4Checker(Checker):
     CONTAINS_PATTERNS: list[str] = []
-    FILENAME_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = [r"liblz4"]
     VERSION_PATTERNS = [
         r"lz4-([0-9]+\.[0-9]+\.[0-9]+)",
         r"([0-9]+\.[0-9]+\.[0-9]+)\r?\nUnspecified error code\r?\nOK_NoError",
+        r"ERROR_[a-zA-Z_]+[\x00\s]+([0-9]+\.[0-9]+\.[0-9]+)[\x00\s]+ERROR_[a-zA-Z_]+",
     ]
     VENDOR_PRODUCT = [("lz4_project", "lz4"), ("yann_collet", "lz4")]

test/test_data/lz4.py

@@ -8,6 +8,16 @@
         "version": "1.9.3",
         "version_strings": ["1.9.3\nUnspecified error code\nOK_NoError"],
     },
+    {
+        "product": "lz4",
+        "version": "1.8.3",
+        "version_strings": ["ERROR_srcPtr_wrong\x001.8.3\x00ERROR_frameType_unknown"],
+    },
+    {
+        "product": "lz4",
+        "version": "1.9.4",
+        "version_strings": ["ERROR_parameter_null\x001.9.4\x00ERROR_blockMode_invalid"],
+    },
 ]
 package_test_data = [
     {