[Forensics-changes] [yara] annotated tag v3.1.0 created (now 803c35d)

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:27:26 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a change to annotated tag v3.1.0
in repository yara.

        at  803c35d   (tag)
   tagging  3462b7f16a08064d9fe3abb7003cf852267bc00a (commit)
  replaces  v2.1.0
 tagged by  Victor M. Alvarez
        on  Tue Aug 26 13:06:52 2014 +0200

- Log -----------------------------------------------------------------

Bill Marczak (1):
      make 'dns_lookup' usable

Kyle Creyts (1):
      Update README.md

Scott Dunlop (1):
      added new libyara headers to yarainclude_HEADERS

Scott J. Roberts (1):
      Added Homebrew installation instructions.

Victor M. Alvarez (116):
      Fix issue with ^ anchor in regular expressions used with "matches" operator. Make yr_re_exec easier to read.
      Fix bug in yr_re_exec logic
      Fix warning about uninitialized variable
      Fix buffer overflow
      Fix bug causing segmentation fault when using nested loops
      Add test case for nested loops
      Enable optimization settings
      Fix typo
      Add Bayshore Networks to "Who's using YARA"
      Fix issue #127
      Fix segmentation fault caused by invalid characters in regular expressions.
      Fix bug in regular expression engine causing false negative matches
      Fix bug while handling nested includes
      Add ThreatStream to "who's using YARA"
      Fix issue #131
      Fix bug introduced in commit 08c8456a0728522b347e936f66b98676a890cd09
      Implement profiling support
      Avoid segfault while scanning some processes in Windows
      Increment initial arena sizes to reduce the number of memory allocations
      Merge pull request #134 from wxsBSD/master
      Add Fox-IT to "who's using YARA"
      Fix issue with files larger than 4GB
      Merge pull request #137 from kcreyts/patch-2
      Add Blue Coat to "Who's using YARA"
      Implement modules support
      Add subdir-objects to automate options
      Fix bug caused by missing flags initialisation while splitting a regular expression
      Fix issue with undefined strings
      Fix bug in yara-python
      Remove unnecessary code
      Fix issues with includes
      Fix bug in yara-python causing segmentation faults
      Rename YR_EVALUATION_CONTEXT to YR_SCAN_CONTEXT and some other minor changes
      Rename YR_EVALUATION_CONTEXT to YR_SCAN_CONTEXT and some other minor changes
      Add more test cases
      Remove unnecessary file
      Calculate pe.entry_point value differently for file and process memory scans
      Rename token SIZE to FILESIZE to avoid conflicts with windef.h in Windows
      Put leading and trailing underscores to tokens, to avoid conflicts with other types and macros
      Add missing includes in Windows
      Fix compilation in Windows
      Add missing Jansson files
      Fix bug in PE module caused by misplaced break
      Fix bug in Window's version of is_directory function
      Set multi-byte character set for Windows projects
      Fix problem with string matches offsets not being treated as virtual addresses while scanning a process
      Setup new documentation
      Rename modules/list to modules/module_list
      First draft of documentation
      Replace uint8_t* type with RE_CODE for regular expression code
      Add demo module
      Add string_array macro to modules.h
      Add more tests and remove unnecessary #undef directives
      Fix issue with documentation config in readthedocs.org
      Update documentation and remove old one
      Add first_memory_block macro
      Update documentation
      Make scan context accesible to module functions
      Update documentation
      Implement exports() function in PE module and add support for 64-bit PEs
      Implement imports() function and other small changes in PE module
      Rename self() to parent() and add module() to module's API
      Update documentation
      Add test case for functions in modules
      Add Blueliv and Adlice to "Who's using YARA"
      Remove dmalloc from config.h
      Fix issues with parent() in Cuckoo module
      Enable optimisations by default
      Fix warning about uninitialised variable and add assert
      Bug fix: Start of string anchor (^) not working properly with wide strings
      Add extern "C" directive to yara.h
      Raise warning when the deprecated "entrypoint" keyword is used
      Add declare_ prefix declaration macros to avoid collision with type "string" in C++
      Implement yr_compiler_set_callback
      Rename YR_COMPILER_CALLBACK to YR_COMPILER_CALLBACK_FUNC
      Remove yr_compiler_push_file_name from the public API
      Update documentation
      Fix issue #147
      Fix issue #148 by asserting that yr_compiler_get_rules was not called before yr_compiler_add_file/yr_compiler_add_string
      Change some "char*" to "const char*"
      Update exported symbols
      Implement iteration macros
      Replace fast_scan_mode boolean argument with flags for greater flexibility in the future
      Update documentation
      Update documentation
      Fix typo
      Document the command-line -x option in the man page and add example to documentation
      Release version 3.0.0
      Add missing patch version
      Fix some issues while compiling in Windows
      Update version number in documentation
      Merge pull request #151 from corumir/patch-1
      Fix buffer overrun in PE module
      Improve buffer bounds checking in PE module
      Fix non-escaped characters in documentation
      Replace WIN32 with _WIN32. The latest is defined by the compiler and doesn't need to be defined externally.
      Show appropriate error message when importing an unknown module
      Fix issue #157
      Merge pull request #158 from sroberts/patch-1
      Remove reference to yara-python installation with PIP
      Implement module_initialize and module_finalize
      Improve error handling
      Handle zero-length files as normal files and remove zero-length errors.
      Fix some warnings
      Improve error reporting when a function is called with wrong number of arguments
      Accept functions without arguments
      Fix double invocation side-effect when passing a function to return_string() macro, like in return_string(f(...))
      Implement "magic" module based on Armin Buescher's original idea.
      Merge pull request #161 from billmarczak/master
      Merge pull request #163 from swdunlop/master
      Provide an implementation for strlcat and strlcpy and use them where appropriate
      Fix bug introduced in previous commit
      Update the documentation
      Replace WIN32 with _WIN32
      Don't generate debug information for release version
      Release version 3.1.0

Victor Manuel Alvarez (13):
      Fix issue caused by regexp code spanning over non-contiguous arena pages
      Adjust value for RE_MAX_CODE_SIZE
      Fix minor issues in arena.c
      Minor style fixes
      Fix wrong #ifdef
      Update documentation
      Fix issues introduced in yara-python
      Fix issues with Bison 3.0
      Fix issues with Bison 3.0
      Homogenize newlines at the end of files
      Add missing newlines at the end of files
      Use strlcat, strlcpy, and snprintf instead of strcat, strcpy and sprint to avoid warning in OpenBSD
      Use strlcat, strlcpy, and snprintf instead of strcat, strcpy and sprint to avoid warning in OpenBSD

Wesley Shields (1):
      Remove unused prototype.

corumir (1):
      Update writingmodules.rst

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  4dc0442   Fix issue with ^ anchor in regular expressions used with "matches" operator. Make yr_re_exec easier to read.
       new  345bf84   Fix bug in yr_re_exec logic
       new  372ce64   Fix warning about uninitialized variable
       new  24d001d   Fix buffer overflow
       new  c9d6d93   Fix bug causing segmentation fault when using nested loops
       new  9cae43b   Add test case for nested loops
       new  f22999b   Enable optimization settings
       new  e87621b   Fix typo
       new  a5736f9   Add Bayshore Networks to "Who's using YARA"
       new  74ca113   Fix issue #127
       new  bfe9980   Fix segmentation fault caused by invalid characters in regular expressions.
       new  08c8456   Fix bug in regular expression engine causing false negative matches
       new  f1999cb   Fix bug while handling nested includes
       new  01bb023   Add ThreatStream to "who's using YARA"
       new  74a7e4e   Fix issue #131
       new  67eb56c   Fix bug introduced in commit 08c8456a0728522b347e936f66b98676a890cd09
       new  efd5b45   Remove unused prototype.
       new  79304f3   Fix issue caused by regexp code spanning over non-contiguous arena pages
       new  0ce0d33   Adjust value for RE_MAX_CODE_SIZE
       new  cb4d544   Fix minor issues in arena.c
       new  3216460   Minor style fixes
       new  89cde68   Implement profiling support
       new  f0e80c7   Fix wrong #ifdef
       new  035b2a2   Avoid segfault while scanning some processes in Windows
       new  ee6289b   Increment initial arena sizes to reduce the number of memory allocations
       new  e13a5bc   Merge pull request #134 from wxsBSD/master
       new  af78ed3   Add Fox-IT to "who's using YARA"
       new  f884da4   Update README.md
       new  f6d91d7   Fix issue with files larger than 4GB
       new  13096f3   Merge pull request #137 from kcreyts/patch-2
       new  f40567a   Add Blue Coat to "Who's using YARA"
       new  a890012   Implement modules support
       new  bd40304   Add subdir-objects to automate options
       new  1d65669   Fix bug caused by missing flags initialisation while splitting a regular expression
       new  51aeb0e   Fix issue with undefined strings
       new  f81eeaf   Fix bug in yara-python
       new  fcc71e0   Remove unnecessary code
       new  3344ada   Fix issues with includes
       new  3773bb1   Fix bug in yara-python causing segmentation faults
       new  7690f84   Rename YR_EVALUATION_CONTEXT to YR_SCAN_CONTEXT and some other minor changes
       new  d907fdd   Rename YR_EVALUATION_CONTEXT to YR_SCAN_CONTEXT and some other minor changes
       new  26c456d   Add more test cases
       new  65170ff   Remove unnecessary file
       new  f5c045a   Calculate pe.entry_point value differently for file and process memory scans
       new  82b2c61   Rename token SIZE to FILESIZE to avoid conflicts with windef.h in Windows
       new  7857a47   Put leading and trailing underscores to tokens, to avoid conflicts with other types and macros
       new  609ee5a   Add missing includes in Windows
       new  6a11508   Fix compilation in Windows
       new  b41d264   Add missing Jansson files
       new  a9dd9e4   Fix bug in PE module caused by misplaced break
       new  b056a7d   Fix bug in Window's version of is_directory function
       new  f609e10   Set multi-byte character set for Windows projects
       new  b0b3c7f   Fix problem with string matches offsets not being treated as virtual addresses while scanning a process
       new  c864034   Setup new documentation
       new  86b09b4   Rename modules/list to modules/module_list
       new  7fdcb84   First draft of documentation
       new  a9fd7f2   Replace uint8_t* type with RE_CODE for regular expression code
       new  044be47   Add demo module
       new  c285e54   Add string_array macro to modules.h
       new  4ff1b48   Add more tests and remove unnecessary #undef directives
       new  0780c6e   Fix issue with documentation config in readthedocs.org
       new  3c577a7   Update documentation and remove old one
       new  912bb62   Add first_memory_block macro
       new  a8ddf6f   Update documentation
       new  2f16c3a   Make scan context accesible to module functions
       new  9575382   Update documentation
       new  b86ef21   Implement exports() function in PE module and add support for 64-bit PEs
       new  c4ae098   Implement imports() function and other small changes in PE module
       new  0c1a27a   Rename self() to parent() and add module() to module's API
       new  f3e8b0f   Update documentation
       new  8552b47   Add test case for functions in modules
       new  077fba2   Add Blueliv and Adlice to "Who's using YARA"
       new  1387428   Remove dmalloc from config.h
       new  e33266d   Fix issues with parent() in Cuckoo module
       new  f8fd52d   Enable optimisations by default
       new  285d538   Fix warning about uninitialised variable and add assert
       new  ec5eb9f   Bug fix: Start of string anchor (^) not working properly with wide strings
       new  7958ed4   Add extern "C" directive to yara.h
       new  6751779   Raise warning when the deprecated "entrypoint" keyword is used
       new  70852a8   Add declare_ prefix declaration macros to avoid collision with type "string" in C++
       new  425dade   Implement yr_compiler_set_callback
       new  92e1c36   Rename YR_COMPILER_CALLBACK to YR_COMPILER_CALLBACK_FUNC
       new  d06a778   Remove yr_compiler_push_file_name from the public API
       new  ba112e0   Update documentation
       new  57ef744   Fix issue #147
       new  33bd8fd   Fix issue #148 by asserting that yr_compiler_get_rules was not called before yr_compiler_add_file/yr_compiler_add_string
       new  d75fc00   Change some "char*" to "const char*"
       new  d972eed   Update exported symbols
       new  6d1a26b   Implement iteration macros
       new  8e869c6   Replace fast_scan_mode boolean argument with flags for greater flexibility in the future
       new  91f4e74   Update documentation
       new  c195f6f   Update documentation
       new  37bdd55   Fix typo
       new  542c955   Document the command-line -x option in the man page and add example to documentation
       new  35d9ce6   Release version 3.0.0
       new  8cc6a99   Add missing patch version
       new  8e85126   Fix some issues while compiling in Windows
       new  dcf80f7   Update version number in documentation
       new  36dadb0   Update writingmodules.rst
       new  48c43c5   Merge pull request #151 from corumir/patch-1
       new  a9db0ea   Update documentation
       new  2eaafa8   Fix buffer overrun in PE module
       new  2dd8274   Improve buffer bounds checking in PE module
       new  e6db404   Fix non-escaped characters in documentation
       new  3b5ddd0   Replace WIN32 with _WIN32. The latest is defined by the compiler and doesn't need to be defined externally.
       new  797c485   Show appropriate error message when importing an unknown module
       new  68d8a49   Fix issue #157
       new  5274d45   Added Homebrew installation instructions.
       new  500e588   Merge pull request #158 from sroberts/patch-1
       new  7b3f904   Remove reference to yara-python installation with PIP
       new  d5ed62e   Implement module_initialize and module_finalize
       new  f56608c   Improve error handling
       new  1c5ac31   Fix issues introduced in yara-python
       new  75139e2   Handle zero-length files as normal files and remove zero-length errors.
       new  5e3282b   Fix some warnings
       new  2d04878   Improve error reporting when a function is called with wrong number of arguments
       new  a22f289   Accept functions without arguments
       new  ac87a92   Fix double invocation side-effect when passing a function to return_string() macro, like in return_string(f(...))
       new  61f517d   Implement "magic" module based on Armin Buescher's original idea.
       new  f329724   make 'dns_lookup' usable
       new  0de8878   Merge pull request #161 from billmarczak/master
       new  bc3bc53   Fix issues with Bison 3.0
       new  a7c1dc2   Fix issues with Bison 3.0
       new  174cda2   Homogenize newlines at the end of files
       new  829348a   Add missing newlines at the end of files
       new  b274520   added new libyara headers to yarainclude_HEADERS
       new  689c41d   Merge pull request #163 from swdunlop/master
       new  a85a72f   Use strlcat, strlcpy, and snprintf instead of strcat, strcpy and sprint to avoid warning in OpenBSD
       new  8df08b8   Use strlcat, strlcpy, and snprintf instead of strcat, strcpy and sprint to avoid warning in OpenBSD
       new  d196b97   Provide an implementation for strlcat and strlcpy and use them where appropriate
       new  87df834   Fix bug introduced in previous commit
       new  3daf2bd   Update the documentation
       new  ffc0a33   Replace WIN32 with _WIN32
       new  03b015e   Don't generate debug information for release version
       new  3462b7f   Release version 3.1.0

The 135 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list