From e92b0fa629c07fc1f19d22dfa3f14c465fbc657e Mon Sep 17 00:00:00 2001
From: Weston Steimel <weston.steimel@anchore.com>
Date: Wed, 1 Mar 2023 14:53:37 +0000
Subject: [PATCH] feat: rust toolchain binary cataloger (#1601)

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
---
 syft/pkg/cataloger/binary/cataloger_test.go   |  36 ++++++++++++++++++
 .../cataloger/binary/default_classifiers.go   |  20 ++++++++++
 .../lib/libstd-f6f9eec1635e636a.dylib         | Bin 0 -> 21301 bytes
 .../lib/libstd-16f2b65e77054c42.dylib         | Bin 0 -> 28955 bytes
 .../lib/libstd-86aefecbddda356d.so            | Bin 0 -> 2180 bytes
 5 files changed, 56 insertions(+)
 create mode 100644 syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.50.0/lib/rustlib/aarch64-apple-darwin/lib/libstd-f6f9eec1635e636a.dylib
 create mode 100644 syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-aarch64-apple-darwin/lib/libstd-16f2b65e77054c42.dylib
 create mode 100644 syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-x86_64-unknown-linux-musl/lib/libstd-86aefecbddda356d.so

diff --git a/syft/pkg/cataloger/binary/cataloger_test.go b/syft/pkg/cataloger/binary/cataloger_test.go
index faa8b2dcd66..d6f6ab15d20 100644
--- a/syft/pkg/cataloger/binary/cataloger_test.go
+++ b/syft/pkg/cataloger/binary/cataloger_test.go
@@ -439,6 +439,42 @@ func Test_Cataloger_DefaultClassifiers_PositiveCases(t *testing.T) {
 				Metadata:  metadata("java-binary-ibm", "java"),
 			},
 		},
+		{
+			name:       "positive-rust-1.50.0-macos",
+			fixtureDir: "test-fixtures/classifiers/positive/rust-1.50.0",
+			expected: pkg.Package{
+				Name:      "rust",
+				Version:   "1.50.0",
+				Type:      "binary",
+				PURL:      "pkg:generic/rust@1.50.0",
+				Locations: locations("lib/rustlib/aarch64-apple-darwin/lib/libstd-f6f9eec1635e636a.dylib"),
+				Metadata:  metadata("rust-standard-library-macos"),
+			},
+		},
+		{
+			name:       "positive-rust-1.67.1-macos",
+			fixtureDir: "test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-aarch64-apple-darwin",
+			expected: pkg.Package{
+				Name:      "rust",
+				Version:   "1.67.1",
+				Type:      "binary",
+				PURL:      "pkg:generic/rust@1.67.1",
+				Locations: locations("lib/libstd-16f2b65e77054c42.dylib"),
+				Metadata:  metadata("rust-standard-library-macos"),
+			},
+		},
+		{
+			name:       "positive-rust-1.67.1-linux",
+			fixtureDir: "test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-x86_64-unknown-linux-musl",
+			expected: pkg.Package{
+				Name:      "rust",
+				Version:   "1.67.1",
+				Type:      "binary",
+				PURL:      "pkg:generic/rust@1.67.1",
+				Locations: locations("lib/libstd-86aefecbddda356d.so"),
+				Metadata:  metadata("rust-standard-library-linux"),
+			},
+		},
 	}
 
 	for _, test := range tests {
diff --git a/syft/pkg/cataloger/binary/default_classifiers.go b/syft/pkg/cataloger/binary/default_classifiers.go
index 75e7befc3d5..da7bd1e206e 100644
--- a/syft/pkg/cataloger/binary/default_classifiers.go
+++ b/syft/pkg/cataloger/binary/default_classifiers.go
@@ -207,4 +207,24 @@ var defaultClassifiers = []classifier{
 		Package: "postgresql",
 		PURL:    mustPURL("pkg:generic/postgresql@version"),
 	},
+	{
+		Class:    "rust-standard-library-linux",
+		FileGlob: "**/libstd-????????????????.so",
+		EvidenceMatcher: fileContentsVersionMatcher(
+			// clang LLVM (rustc version 1.48.0 (7eac88abb 2020-11-16))
+			`(?m)(\x00)clang LLVM \(rustc version (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)`),
+		Package: "rust",
+		PURL:    mustPURL("pkg:generic/rust@version"),
+		CPEs:    singleCPE("cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*"),
+	},
+	{
+		Class:    "rust-standard-library-macos",
+		FileGlob: "**/libstd-????????????????.dylib",
+		EvidenceMatcher: fileContentsVersionMatcher(
+			// c 1.48.0 (7eac88abb 2020-11-16)
+			`(?m)c (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)`),
+		Package: "rust",
+		PURL:    mustPURL("pkg:generic/rust@version"),
+		CPEs:    singleCPE("cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*"),
+	},
 }
diff --git a/syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.50.0/lib/rustlib/aarch64-apple-darwin/lib/libstd-f6f9eec1635e636a.dylib b/syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.50.0/lib/rustlib/aarch64-apple-darwin/lib/libstd-f6f9eec1635e636a.dylib
new file mode 100644
index 0000000000000000000000000000000000000000..8b9c42c6b69a9a885e43394d1f3c928faf73e178
GIT binary patch
literal 21301
zcmeI4ZFAe!mB;T*2$g_16e*DsB}=Ke5fiJnH3XkTIqr<Kwc2QEcipbHO`8V<1TG{*
zB*6fn9=hIEQLI!>X5+Errgf4gk{#KWY%7+>j%7PDp23atMl;>-z%S6Rum?6T)Hj~&
zw0W^F;1}Z07Z<?2|MNfR9(qPb2>v+t8VjEUT|$q4?tan-FA0w>{F8GU3m?4ptq*eU
zzx=Ipko2un=uP8W=Qx|>@tjAS^MCjX_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6
z_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6
z_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL(6_zL_}3WOR9AGJPuLc*f~kJ26;
z^5{j6j(haFM`e%ZJfdfIabp+Zx22n}b~bl$Z5JPSNZ;PY-O<Lv4R82w7k9^<ZErZ(
zSorku_F^9Od$ix9qDO~4I_A+U9!+^<dqhv}BCNjoK6=wb=dy>5<xf3!e-*qr*}3mw
zW8u$#$EzOG(;hlsco+Z;9`7&WQLjgPJ<54B>d_I8Uh+uwsOHfLkLb!SLdcqLZY=B$
zJ6Cpxmtn=tDc_v+5PpOG@A$6A^u1j??;)a#kGB_MkYF&tAkE+qgBKYbXYe|MGJ`n=
z^o&Ov9^GT)Y<jfj(E~>GZI8S$SUVd8Q!;e683pOPO-C~5XRx0^k-=dG#~8fAV2Xjw
zfS&Yd&7+%)oXd>BgbbZ~9^GdI4&236hV(Qe=L<#w`c~6?40;*tWsqYq%HRltml&uF
zY79;=per72G6KUfbgnRJET3lh%~?iZwq3l-kiO^9c}9r7$Bfp51REJ(kY;d*!HW!z
zGkBdrnZX<bFk17`bi<>2jKFBktInE74;X>b*uCDEYqaK|YczKEHlrY2W=3m5KO5Q4
zpvd4bgJTR{VKBwOW&lQOK9R0@bdwPnt$EcoS`)!&jP5gH2N(U!xz#v%A;bRuk9<07
zjZ<sR=7E3Y-v96Sd>8sO7A_P+k2cEwzYg5ocH`9N%`2(qh<D{r?>4VI_7Ott%9B37
zi<N#C&-lMawEqbci%%G@Jz;$A3FCC5dBLn(HXyh2hZcmapUKB+zeZ58{&sB<K{-87
z4nazt45ZmK^pdkS`79RPy#7S#7l-ocp>+RVr8JzE)x28j&!jWrfpq48m>vu$hDqp$
zjpeJ(s&j*`I}e=u^eeiK(Noa_`4OV#Gn$$m$rVbXl8-7zrKXpODV6Ga+19HT{R+zI
z!|nfBpm*satcPBvUp~536-9+;M9dV`LMfLoCfvm-l4YyXtYJ=DHCZ7No`fa7*;qK|
zY&jR`Qe)vf><YS*#`5BC-1n!`?pxJ-K`AP^f|ljva@kPmhYvrXw{||Jm*{C&^41Y|
zYBpCK&gZqPsO7ccQc(+(^^yWlb5@)U=SzBrUf(%S-+R@as>q6#DHfFBLRKZ3l543~
zXZ5NIUB;<pdJcB<*2%`H6)-kk>c;wsd?8;dWwNDGPAn-!t<a)qlaj7I+AOSk1GK+M
zZ#nDE1&*GlE5+hSzLd^^Y9nev9#Q!z*_tYu#%vXYy+l{($MlbGVBT>yevglgW-{rV
zGOQ>ga#|!>Cf}VZ1tcp&-$z_y;ZlEN;jVMR?Eo*)OHkuCos0A~CylBFk|zooQHF;_
zxtPm@`QoTbDspwQOkk4R1v?u%f1y|D6}l3`DqR^C6)|6u#cWZPv$>H1FRQAVDeG0z
zSiJVA2V145=oY<BKmU5GjGv#&X4OJ2pUslAEUOSoZc?w5b=bp~^wwY3cRqd;sdMzo
zaqihUkz`~smrf6-v!!8CZ81u35XE+`IP3Hxy$Z`&eutiN)?dQ|u=7JCTTG9DlqFFV
zbD2B|)#R$KNROjH7hF5sYb>8}8{CheZ+HtzGe#KPFkI3!Ete~4g^Z$QHH@{V5Q<{w
z_Hjuwjf$jKZ9~#)xJ4WihlkRgT+iN`Y+6JjrfHabOE2ccq1;e9lKLUvk&vbgV;Z&b
z?R()qVpip{g+hEZR+i_Dx{ZGs$`psvLOfP6)Owjj<0#7iV8EKUY*LZz`C7aO30%)%
z*)~i`uIVT!TaxQ<lRMZC>Bh;HqU)G$_KysuTV>0XXOna>pc`B=Bo3vceX*DXUY@pa
zPk%NKYmzO?NRIXDa}uc;$`tO#&P8ZI;_{5Fm*rBKNQzNa>ZVDm$~@vrvNCO(kVGh2
zGUg;OvRp6Q5}AWRd?1f_+>;uD*N0#eVH{0KNQpwolCPp@p$i4|>LmBO5UexQ-4ifo
zaXgZPMYP4^0mB;l2}11$6R7V+B*gawYqAYiyjz$<xHANauVDqx9g6{I#3ZVu8<HYJ
zI_vg4?n~ziuot*y5?Lj5>1F&p?v7+38eQGphb%&-C6kn8Tc05)UZNN1skBs)71NMv
zFkV+vjX%8`$-<hWDZyRj;GQ6C5C5F5h;B3#X+}16S=ALJC~{Sr0h<{n3MsO!Oi2^;
zT=JC==pCj@$x&HRh-K-Z9L$}P^(uz?f}JZu3dfH+caZh#;_*&piYU{t3AJv*qKv9!
z=~ab?d_W_ZeiEqE#OVMhCY}2zh})AnA<`R$8VHG|3Q%!TC>jZp>dd&37U8vR5Fr&7
zC>`C;(Zx|vHwGh?Eh%6N@V7uO22h0W1Q%duJyut23k8MtU=0aTAuyBc3!wu3msoAy
z(kH9<<uQ5(3C<1YK}3>GQ%?PLJ(2}=Te*%H=wRq7_q-cHo{I&i^eRU;1DWCE(SE4s
zAf{f?lg=t0?9F9e-Hh2JZ0aZ|5P|H-WQ5KMdPn?^F?t&B=Q<(ieO=s-xGr%N6;e;5
z+3vU-UkKF%U2`4Oi6<uLe+MNQ>>7Uo6+y}mlEqlbfW!h{ucK@dx;5MpQAw#jDYT=I
z&`zAo7}7X7huXL}M=yp-^EMfDHc>kIi&%wJ409fjqFmD1z`ux?P`U^w;vWTa!_j@n
zPC1u_eMrFj#^~Dtc<VQ3BapkpLp(i+<3ZIlob`VX!Or5*A8_;(ri(a=U&cG{pgt_%
zEceVIaE4@PQq`#bmY7Dph@VT+tEl^5pF{n#x;-UT>tzJ>8jpd%D*|0fL?E{;!%Q`n
zKZ;moT_HGu@=1D*PXsGa4yN&Iy%|UmUM)@PZbfSE&t@QfRPeb2-?QOMC!Am?oKlhG
z+^Gk_)%?S4J~f~iDv|28CKhnX^=9<w*IV3wW>OsLi1q|Ec;mxuI5k)4l5->2s_Jw}
z4e4c-q+Sm}u-iaWQnk(b18zybQ68hWyAwgkay$d)dYV&B*VqD_oy%wVf=oY)K)KR2
z(h<qP-66g^0f#g(Z6rL8jEuASbdp{VJq?z{KRpEA5r8Bes-IiNCPqTAqZsZi)~kA@
zR+cPMRV8b_I(Q@j4{IScvm(<a0fph9?CO<NIMWo_;vn*4&_D2<_&1Odd?;iYbrZI9
zk(;NBC!9O+<C3nTc2ZZ$I>=R(RDDLbbVJ|ys0iMQkU8Ck!YSKzYy5C(kaNBa%+->C
zgi#|^$*9pKdM;pPFnw?s<a<g}QL6?$2t-%2h`w*EpNl2!kWx0P;{{h>p6_(-I5*t1
zHK2e+MS5mzJg8M{dMh0fL9{*NjfKC+JAZ)Q;eN{bLU&K{KRR0x5srpdZUAmxg@lN|
z7N$3Y<DhF$n#tif8WD~Vx;?h@=OB1zFqx!h2I<YiP}$lvsQfZGO;_Zy{#%Z2$G|8p
zniYj`!21LZ>R>{K#>doc`XN0Fxw42lGM$Lt+KYP=--G*Yy~6FMOT`GM)hz;EI*y;|
zjcIke4%zIi{#P#?)RrY_kmlD>4!m-k??aaS<0QQa+qe}GCP6Dc5koDL#I8B(knH#f
zijvYeeY;-*y&%RY!gaXT8Jh|!AnR55(uCq%VxS_|Ak!<x45*3WpKvZf4d$Ln{&Jjt
zj1V6QTErG2&yBWXh`|<$!N<RWM%NJ3_xE*rF&q=3y>B|#a0Edk>0FcPb;x%7LabIV
zK^{e)aU%goPbi>^8Mo7X2dc+vuwAbneKsIfoI4M<BT(s4TlfVbJqf)fc(I}@7V110
zMPqRCpi*Z+h-4u;UHJRqX(1uO`CO~pVURJHq)Sj!og0WQ%?612+zcPdfU%=}-4jqM
zzTUz;_(U{2Mn8)tP%D=?;9TZ~<dF%tSv!LaC~D+QzBM?lSI1-UuJb4y?}u}zI{1?q
zRF`hu06E~6I9~|A(Heq!-Nx-1n1L|Eks;f1@`rB9M8cgxh{E=$Bt!YH!kOF-hoUV{
zlfDV)PGsj^gwsJ@i2Z63DknT7j1GXWzk;7v=~uZN?CmMNhB&<@iNjb;fUCX-9H!@6
zg|=7=pi*&z`sw4E&<0yS6AaVaL1<K;PGsFo)@!`8-E%PH&Jdy<9Q3ao-P#LJ;^B5{
z3eHV2C}xJZQlOrNm3$rpYlfj)`W=!w+jt&Q;Kny+Lwaqdz?UM1ViWLcubWWq-HC)n
zCM!^fNEv5QnA;Puji?xC5jkUT_Zx;@oq_`qI?oS>4!W;Rz)dmezr)XlgU~P~e>MJU
z&_Z28XTYA4p}X$uM&U8~KKWHhnkMu7@7+_ZtGg><5(QK;x$mP)l&+xYP(KRP%I!Z7
W;f^5K8V^R`_%GK}1(XZ#6aE(%O>$uX

literal 0
HcmV?d00001

diff --git a/syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-aarch64-apple-darwin/lib/libstd-16f2b65e77054c42.dylib b/syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-aarch64-apple-darwin/lib/libstd-16f2b65e77054c42.dylib
new file mode 100644
index 0000000000000000000000000000000000000000..d5949c118f02fee7c802bd96390c0d20913063f0
GIT binary patch
literal 28955
zcmeHQ|5p@OmVbra+THfS1{(qq9WWYkBW`!oUm#0Pz>x$ePDW?Uj@fv&Qe9OoH8x$H
z{(|7d3>Y*Ri9tan2`VZ^qZn}|6O3rix$hs_TV3xlXRGP0onQA<ozvV;-Fx4C?|t5V
z_f^9=g+NFRAtaRc<4;2NmVOfA6A1Alw(9Fqzi$nFcLo1<EBMn{G`QCYM6Xve+^Ar9
zt!nKlypH;{rf{r+9#+us?pi~dLc@D&8E&!`jRPiouc4E1!3zE`W>;o-QOWSKf?*?@
zwKbBzg5FrTwR&zry}^bx&h`rW9ToIDE9hHMA6X-Q4N|n$c;cw{t>NE^`pz}<e`Ee#
z8I$TQ=wn=O;inEiR=qJ6V>zt)<EYz(pMTTMI9-U1>m<A9aYdIo?(9dVpXr55dzm?I
zU>f*_DUg8D<;j{YaKNPt&N4+KQxs4dLn|}D2x?o`w0woy?f7whVg`Q|v2np2rr2TL
z6Z!>H@Zppz&NB~#e&eE7nPRJXPu|0}Eo&Lz30nTeusmf=npl&v7$sMuhjPo`F^JJ_
zQ_h@A<rqJsr%|2WV4ls0jq5#jUu)hHncW)+Zd|Q&(p;YI(k&q#CXdoF(`VJA!QxSX
z1=D%eBV_T|-)#wDb%3R}Z9M3-T@0ni5+Yz31+2hx%RsGDp(_V09(|S|A$r#ArYy_H
z8KbxWr3=awSF9danPMGlvPvMkCp;F3n!|!`SPPzae@4$Y@l!S$t0UY)FJt7ZeV7sd
zvCz%%#6qCeBMnzg4|<OcgYQq0H}jHbS1r3YwS;VA_k5!NbbuBXfD>Y!?{;SA6=Zdm
z))j`u-<#8-%LN8TiY8cXW1Tmhg!4Ak48fNc4=jeIi^~wqnsE=Xp}xZ$;A^I6W{N6g
z$tVNxm>KvJMw#b6=1H&HdBO~H-B>W!gcofUI||~*s;766YU32D$O;)W=i_0LPBYNV
zOG%*kKl|FZ9y0+$TJ>G1Z(BpZ7dtRmT^)jTNBd#kWZfF^6sp(i2}aRSk0EnxXgonb
zWA{A2;5<__qqA}K<HtAz%M5S^wZ_>}Zn=S4gF;wh!T9!|=a|AcpNuPX)Eo$(V3`BG
z&srFRH!k{;Dfp4JanKAAHtnQ~-S1)d{p|iX?B0h75k+j(2T^Z42~;HgC_FGpU-jUm
zajC#HGd18M>(qGMFfO>m6mOXKr0h|EUOZ{e!#FdIi!L(-Kfh~-Ob1RTj4%aeQRym+
zxjImDRR1V>bS!O|iuGWk)AY8*rImHVgB_(KCZwZmAbjYn{qkkyO+xV8611#LP17@`
z3w_9<@`c-nDP=IQrol+4GQ+=P3u9tsh8R+2EKQj~u4GV{;f-N)5%@Xu5k`3(KURGb
zb;d^QWByf$jjJLxQF`8F31(Omp7HRMDK?rR2)wj-SPuz0%^a#(ivXNAw+k=I-AB!7
z@CC9)DC?8nW+9Eq8dpDzn<4qydQO=kk*LyT4Oz|XyZ~>&U1PAgo9X$Hx{uxS%%ESQ
zld)J<L#ebIxl(4hk6U?7!*T@!y;Q-l8wq=DjV=tm@w90@j$MB>Nia?p<FeYV_tv3j
zFz&n94o2D6L|$6x6&87CDXw`?8c)Mz2BTcG8XtZdtu7F2>49G?o6zcU2<A)`{RKwN
z2^qO;T*fn(F{W}0ETFz*8i6xrqt(Heg(*Gq8%IRNQPLH-X){bZ0iWBs+=s7hTwn=i
zZCvP#ZAS&TU>9T@&e^$)*!FV_uGj<#0{h+q&tSn^2Y%YV&la!T@&{(AxExKeWYaGl
zgGV+lFb0=xT<8)^*tyKwK9%BvE!#wCDm#j-yPzMQ+QircKiPQDd0@v`MP^|c*f*<+
zE*Ql&yH@OZ8;6TF!-Z-1-o^#T@}rFl%)u9SE{pKk#wB1|rd;-UFk5=?{om@03;xSy
zAV*-@#slWzo{bBBm9onfn1!!xqU?biHXd{t7HnL0@GlP)^KC!ev5A4D*DedNfZLT`
zx>)w@(YgtPwsps2zc-d_X&d6-@L>vmG>azxRg?7_w)G1mTw=Ae%y7AqVXBg0ni(pt
z3@pN&&C<XE{N2Wd*e)Ihxo;B$lm3~V%ZTmTU`N(pvsqIh3R5=y&~dnHap^`Tjf)4v
z(Y`eCDz|;6$EwRQcwzD2jk!DmKUliq7A_CLw>BOf@WRFek3hQzk|Eot01rI0=_U&+
zHXcV{(#8X;nq4<LZ0lau_MF8d((Xa;pzYG&**0S{ohJSbe~>@+wz3?7M+l78Wfpp?
zqUG00mH<8&uNmy^N(Q)B$wJRpvTVoioJKFJ3D1+1OF9DI*)Rf=aLLYP!FGQhgKunt
z-~*f8*|)>?fo+fNbh5Vl2D8L&Ab#5;33ssF(br^q2-8{nDm`v{*c00d+-JMDaF^RX
zO~Z)oNlq7R%UYLxvaP^%n^gMLw&2idu>Nj~ZwW2~aLuNhF59ffRI>iIi-+g3+t#Di
z_Ky?zNHA_QR-~T&zPMs7=(a76pTeR|H~8yM8;>9_^>yqIp>&!3jh0?!02Vkn#{iZv
z=W-Zu7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH
z7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH7;qSH
z7;qSH7;qSH7;qSH7;qT)f5AYg$9!>M7n6NV9%1rhCeus~F$rTFOmZ;G!F>*v7@#8@
zOmHy6!8`|x9IP<l*=G(d$Ye8<dzkECazB%Ym^{X0Ka&L}VT6MT4rVx*=U|b86$a=y
z2h$wPaj?L_G6SyPnnMmS*~DZklTjwSnLNnkQ6?28vrK-<B#d(~&A}W83mhynK*u<k
z<Y1PA`y4DWK=zv>_A}YQ<PIi7Om;EZ$K(+vKV~w`<PeiE#=#^9vmD&#V2J@b!odUw
zGaSrwu*ks*1D;-%A51ngxrfOPCigRWh{<D2_A^;v5=J<f;9!P>c@7piSYd#Ub1==p
z90v;=EHmJGhvf&8O-!~j8D+AY$%9NDWl~`>%jBm_!Z-)h9L#aBz`-&Dbc};Z4rV#H
z&%qJ{<Xx5@Og1pNgUJw+T}<{dd4$Q2nM^Y|#3YPyFv-Cz2lqKxVt|ftFu}nL2lE^(
za<IaHr;p_alg&)-VX}kC{Y)NW@)(o-Oct1g5e_CenBicagGCNj7@*@EOmi^D!2$=%
z47d)k{9v+)$yO$#Om;JQkjbM=DopaD3E%!xy8c<o+jH5<fkpON?)mM<99ZO#<(}XE
zl>>`}5sQM~!Z=6&M+xUEIKm_|<cj$M!u9l5d`WHoed$p4Ljq@Dp7g@G)A;_%5g2iW
zxD&qD8egsQ^J{{SE~;{KcyBzhH{9H+#H5Z$GO0wGBcVupTPV^NO6;biRrJ<6_!eJd
zG=t4X=wo^luEBGGRMoV#x2NP}yA+DVBB9RqP6?gi(K>j6uOxd2*XdPs{(?S*M<wT2
zNJ*)x9FK-msfZfyprfS0{g;B6FDT+kJ$E9Xm1I?v^_)sa@#Rd<@!kGE(g*ZAdW~M7
zGlFm|+YwGgqls858A_(q&UmT2YgP0b+@j~;0{jH`V4VI$r`_ALa-v;|NJ&MJBgu|X
z7(-UU)Owu89DM+{=@~jkFCn^*uAxL&QKHdsINT|xlw{bL@r8|afnI@SdI2uO1dim&
zUO|QNNJqQcA$KN1Qd~+&v38uodO3Am)KWO)AMtgoU&3>04CV>F2y^ZOFc(QG$wVX+
zQbW;HED?%hi;V+XMmr_yLz;raLgza;sB?4ziCRLsz7~WJ`Z{pfu@H_a8c#-*WG6Oj
ze4j3n4k?}1W$f$+T+?UpkbVg>^dWo!FWvoqIgyMBl9G%`@n}dk+PEbpt>(~u1_O`b
zdVG%E&Cs7u2olW1qn#a*&dyL&NhtAn%2*F?zm)G!=Jb;p9N0~`f@?U3Su}}5dqKYy
zgg5$P@lYrxC#6KJGnta5BsTK3oa$24f+`oV(IsT<0$rwe=v{oB=JauF5>Lfbu}C-+
zQ$wk^8i`_)YA^h}Ur`67%<;6b+Oyc|3a;`UoYPG@0k_@w^1PYORJ$7QR6Al)XJ<S9
zFa{_oN-mPtG6r+g^lNy4Jv{?_{U`GGy&!x9<KcuH4olIPq^QvlvVpDK$F+g9R+`c*
zzQF1mWc(TZ97gG!;NBIDha-uE9G7K9kyD*5aM7bD|02K-%}DDa+=h$r1j9eTWLWl|
zibhjWMT$k^p=5hF+99-d4X6WhKXOc`=nB0DFLC7O=tcS~%((HDM2eE=jCIJWoQOvy
zDH<`7>*faf3l4h<y&q!_XW;f9iBQv)Qo@N)RBcZn$FWcXQ%Vp7I8#OXh)+u9^>neI
zidm`9k24}Q0$o<bR8AidwM;=5wJf@m_2IqY#NH4(1l-#?vQjRuic((IaPIhy{H?)&
zn#<`q@A?MA*&W^+72>42_cuh8cKdT$=D7DTiMzLufOm_xqp4rlPZ;esd4nPBL(OHR
zbly<-y_<srx>8K5-fmZ<L->f)cpH!8hw}w>Kr9Sracu;FKHg9Tv-qAix7S$CandQY
z9q~%}lp<yeIgEpId%S^cl=3<0qy)dZG~M?B2@9>HW@|%G#4JCN_il5w$AoRf@7`8-
zpk=Eo-YztD2c&#nm&Ia68xqy5F890PLYh=d`QeN#YB)@(pyP7ji?yXeNlQz~bjx6K
z4)=|k*75^hg~Yt@peZTICki=9_R&W;<x?b3S06+=r2)0&)sJhE`jDuoDXEw)i0Tmf
zm1cBfJ@E?-JLwl5SwHFhh(z7JWK&&ZP|srx%X$Bm)V^6yVsOtD2?_K&;;Z{j?=E-J
zeaf8_f^<$y7E4P?ulh(mVlk&miijIdRHT9=rqvYgAN<D+XiBL$RS`8^lqIZ*T4C4+
zvm`DY_Xp4@yy;SN!XI2IwWrsQ3*O%QDS4%F>z=%-p1_!Csh|zEZ6~pv@OjV(b~4v;
zqUUX*_rL>EXoD9d=1v}}OBS_sLCc5(lAP1UEVe5uzTcAeo<D}F=rde4pDbm>K~>(3
zIXdE(rGng#oS)P(N@?k?d#Ye;9jStGe7(3&?w7QTfOQ^zb~ha%^>V)|pTH?7MO+O{
z&xm;~6Q<`$`%Ze(?~@0zvA;>Xgi|i!5$anG9xO#%@sVm-AHbTRh>|R;`5JnTBwAXD
zzh;X^%?$b)F*`mCRly?mxJlMC%Ak}xT)$f);hl6mv=ue^0v;c@(6Rut!Mu1<EA+R(
z16RM=1K*L&-j>6MJ=#E4#dF!`eFbj8w|;~1fVUcxuczBnlnXtWs2*Q1fV&C*e@2bp
zBeqAppSjv2IJ3qES1jahK>pyW?>_@tb`VQh%V{^v`w_<*4-UXNk3gS$S{ej87Sc0#
znq}0JrOC~1s)4B>=Isf!0Hbiph4BTLYRwMkwc}W9alhR52&twV?$=yS8up$h?Y*_c
zM{i+)IFGN-{i@zq;~&&D#kac#zBl|*DNU5UyNTDm+taUQ+GG;hiD^>pt`B5$+JN>U
z+#u0jxZy`uPihgDp4U$KaaUqq*6pUxdp5b@8xo8(672&?E*a{DEgJmVfE5GtDCK*r
zr=!6y7jt<%x0gO3Bo1fkH4^YON_4`LPiws}<-r;PXX{C|ugNn|EcDQ4Ub;*o?kzQm
zU=GW>mVwbmKdGWG*X<k(_!Z1}dTWPAl#t(z!D>ZK7LWJt@?aLyOK<L^D`fNGKY3Dm
z&JB;?d}s%~vAznf<9p*bDw;%}dbG46(WQVuFVv7tLTymZ6mr9&`vWgr#w5Tp+1TV#
zhgwb>!*bKxq#9?}j3pO~kdl+M9>H(4tS`c)PvEvcmDVMp+t@<!mO^V4J&PUr)PZba
z7|tr*BChkXu2<EJtSc&}68=aP^LS<$hx-&g?{?Gsm^!c|!Eykrp_cl6nnVQrhgp8_
z)_|7Dt2ww;<7*@OX;{D`?uCm^x_a054*GqV%=AhZ>X!X5vzY{ipsSdX;CfKZtC;+B
zRD#jd!8)>D&E|UH63+J}?hX3GpOMq7o-3&ICMIw#z14b5)NnfzQmYo_G!7BBtfCES
zc};I=>!bL7`x<pfP8ajqAWk7CWwY+LL#Wb>hc2m5%!}^#V6=K~9igKEOi95DcRgs`
z84<ieaX>Bf>q5>SREM%H+Zyz&ni2IZoQ1PEPk7<?kgAl>(z+?7rSY*1t64##xA66U
z8{L}&dMcGy+u$(?_u|&8b~gm`YC%MYA2xYwd*XgMt!Juz9zR_7U;^(F=ugIxgcIG2
z=@~fC9S~r-mTVE=7d)HbbGSt>_QLm?)I*=_q;n)(3r{@QQEPR=Lv%c{-S1bodDX)n
zaWLwoUv_Lt<*{~V^o%A;Y3-CS6g0xEPvw1|xDygQ^I+wrXJJuDc<RXJNRR}?<ZwY1
z)F521BO6kAH=QpH2yRs4KLM<E<%V1SgXH1vXT*&w;_YqPm?{>EIW@1s^bS19o&?DH
z<7y#``SF$TJ5qxKK1)RP6~Bn=9B9DfxXyzINzePOvYs6-m4quBNS*r?&j6Nq`og0R
zsv2A}`y8!7#+q8Zz4VGvCw#RYB(J6xYs-aoZY*9w;SJ#(dh2xUD;_#J(2LJmciTyQ
zO*35DAq4P^>n=LK*$ZRBTfuBGnbzdSrU3F>Rm#~Ze=VNn2jFX$IDp0FVGN#<SnuoP
cm2JQCwTgPNkS$^nm9j0{tLcxvS~~ChZ+7cz_y7O^

literal 0
HcmV?d00001

diff --git a/syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-x86_64-unknown-linux-musl/lib/libstd-86aefecbddda356d.so b/syft/pkg/cataloger/binary/test-fixtures/classifiers/positive/rust-1.67.1/toolchains/stable-x86_64-unknown-linux-musl/lib/libstd-86aefecbddda356d.so
new file mode 100644
index 0000000000000000000000000000000000000000..a554f42342ff99ab500a65708acff5ef194745e8
GIT binary patch
literal 2180
zcmds2-D@0G6u+~xcZo|#uxqHI;E0P&A$w=%b9aXl{2;VVVuUu9+6R|AckXV+%+7>6
zGc^fDv<SWkT72-WP(h#iR0;|eA7=lto;$nI4Q-k#_#({Qd+zzVzw<k17`6Bs7x$_v
zUQ&xkhd1&35I4rZ;y1^?;H6rI->41oQgOGcU{q6!$4A8jya2*?YF1OnkG{|#umRGy
zmEs<*e=>FZ{b>E9mkb~k1u07LJwm98I<P8=GJd>Jm%Ad5@T7tvc=Zt<AvB^)Bq<T8
zG>wu#N)>QKFI9@KE;OWs)Z%AVsaEh}T^-*)QUJ*xUlu>$mqGXqjUVDgwZ2{|=ZXhv
z@r|;M>$N$(a-o42ui*OJ241`hm>1OIex<lm0^EShRFp&Rr{NJj3Vq$r!zc^m6zO>?
z^eAC8()YV=-?dv&80Y(~QJzM67_%r3xbBBpiV%wq)6gVLmO`T_JJ{nX*^%Xhan?UR
zf)U|ms83s-mUm9UYNLVQsVP9biYnD=EthLUF0bI%OU>Ulea80M#5Rp8?#`HAJ<X)f
zEBNiH@toYr<aiU$o(L{;5AgYk%lu?h<W?dm?nrU`P_95L1}Z<5%|iCGX(c)|y<gJC
zL^dT8NE2C1%I?dakAE!wtU)|Njkn59N!?FVqRvlL<e8atNEAY%vU7nh?`g@=N?Rkk
z3mt-f2B-Eh@jok(q03tzYwumxOk!EYfQHg|sBLcE_)uFGd73fpHWz7_#F|0e4l%Ul
zz@c5!_XATi+osiOo2_=|;za}#B&ayh(=3ox%ZY-)*58#15_B!su^rZ8!<@8{US`(+
z%H(o`23@~nw~c{IJ4ToGnA2fBx7T*;u7y|<MVw`TB1L{CI7czP9S&*6(I!1S*yMC@
z4PbNBzqRGS7$(dxW@4N&rh6P?^-cseH@BPbCqg8jZ^QI9KWJ{id!u=IyJ@t;IL!J3
zk;IwN*$FJm^?NQe2Z3P^9BU0`{MdY{yw&q&ZuPwKTF;A<fP3DEid`-|@9JojXDb@8
z;(3EX=y^%nPctxllwQw77!Ox8mIw$)_GH1JFZWBQ2du8XSlu1xsk%$lgv_8Oq(n`K
zL`}#9H6bPH6WrJ_-_QDa%yu~2<pJ>H1a2?jK4q@qJIwai&`Fo)l<;qAmMqD_Z7EoL
znXm<?5=XD+`)$*8sOeJ2X3iRthO;|#g~ma|&-U8_X0GwU*^d8V%U84)9ys}Rto{T4
rwP4847%2<>V;#ZwBFZ=rKHzP$>+nvO^?U=q5=nSzJDZ~aH|I|PLZW`M

literal 0
HcmV?d00001