[Forensics-changes] [yara] 70/407: Merge branch 'master' into richpe
Hilko Bengen
bengen at moszumanska.debian.org
Sat Jul 1 10:28:11 UTC 2017
This is an automated email from the git hooks/post-receive script.
bengen pushed a commit to annotated tag v3.3.0
in repository yara.
commit cde939e85166933171136b26db2473db07c057b4
Merge: 362c667 7e99c64
Author: Wesley Shields <wxs at atarininja.org>
Date: Thu Sep 25 16:34:31 2014 -0400
Merge branch 'master' into richpe
Conflicts:
libyara/include/yara/exec.h
Makefile.am | 2 +-
configure.ac | 6 ++-
libyara/atoms.c | 56 ++++++++++++++++-----
libyara/exec.c | 28 ++++++++---
libyara/grammar.c | 8 +--
libyara/grammar.y | 8 +--
libyara/include/yara/atoms.h | 8 +++
libyara/include/yara/exec.h | 114 ++++++++++++++++++++++---------------------
libyara/include/yara/pe.h | 5 --
libyara/modules/pe.c | 19 +++++---
libyara/parser.c | 38 +++++----------
yara-python/tests.py | 3 +-
yara-python/yara-python.c | 24 ++++-----
13 files changed, 181 insertions(+), 138 deletions(-)
diff --cc libyara/include/yara/exec.h
index 9dfea1b,83f5c36..e3ea9e0
--- a/libyara/include/yara/exec.h
+++ b/libyara/include/yara/exec.h
@@@ -30,62 -30,62 +30,64 @@@ limitations under the License
#define OP_AND 1
#define OP_OR 2
- #define OP_XOR 3
- #define OP_NOT 4
- #define OP_LT 5
- #define OP_GT 6
- #define OP_LE 7
- #define OP_GE 8
- #define OP_EQ 9
- #define OP_NEQ 10
- #define OP_SZ_EQ 11
- #define OP_SZ_NEQ 12
- #define OP_SZ_TO_BOOL 13
- #define OP_ADD 14
- #define OP_SUB 15
- #define OP_MUL 16
- #define OP_DIV 17
- #define OP_MOD 18
- #define OP_NEG 19
- #define OP_SHL 20
- #define OP_SHR 21
- #define OP_PUSH 22
- #define OP_POP 23
- #define OP_CALL 24
- #define OP_OBJ_LOAD 25
- #define OP_OBJ_VALUE 26
- #define OP_OBJ_FIELD 27
- #define OP_INDEX_ARRAY 28
- #define OP_STR_COUNT 29
- #define OP_STR_FOUND 30
- #define OP_STR_FOUND_AT 31
- #define OP_STR_FOUND_IN 32
- #define OP_STR_OFFSET 33
- #define OP_OF 34
- #define OP_PUSH_RULE 35
- #define OP_MATCH_RULE 36
- #define OP_INCR_M 37
- #define OP_CLEAR_M 38
- #define OP_ADD_M 39
- #define OP_POP_M 40
- #define OP_PUSH_M 41
- #define OP_SWAPUNDEF 42
- #define OP_JNUNDEF 43
- #define OP_JLE 44
- #define OP_FILESIZE 45
- #define OP_ENTRYPOINT 46
- #define OP_INT8 47
- #define OP_INT16 48
- #define OP_INT32 49
- #define OP_UINT8 50
- #define OP_UINT16 51
- #define OP_UINT32 52
- #define OP_CONTAINS 53
- #define OP_MATCHES 54
- #define OP_IMPORT 55
- #define OP_LOOKUP_DICT 56
- #define OP_CONTAINS_STR 57
- #define OP_MATCHES_STR 58
+ #define OP_NOT 3
+ #define OP_LT 4
+ #define OP_GT 5
+ #define OP_LE 6
+ #define OP_GE 7
+ #define OP_EQ 8
+ #define OP_NEQ 9
+ #define OP_SZ_EQ 10
+ #define OP_SZ_NEQ 11
+ #define OP_SZ_TO_BOOL 12
+ #define OP_ADD 13
+ #define OP_SUB 14
+ #define OP_MUL 15
+ #define OP_DIV 16
+ #define OP_MOD 17
+ #define OP_BITWISE_NOT 18
+ #define OP_BITWISE_AND 19
+ #define OP_BITWISE_OR 20
+ #define OP_BITWISE_XOR 21
+ #define OP_SHL 22
+ #define OP_SHR 23
+ #define OP_PUSH 24
+ #define OP_POP 25
+ #define OP_CALL 26
+ #define OP_OBJ_LOAD 27
+ #define OP_OBJ_VALUE 28
+ #define OP_OBJ_FIELD 29
+ #define OP_INDEX_ARRAY 30
+ #define OP_STR_COUNT 31
+ #define OP_STR_FOUND 32
+ #define OP_STR_FOUND_AT 33
+ #define OP_STR_FOUND_IN 34
+ #define OP_STR_OFFSET 35
+ #define OP_OF 36
+ #define OP_PUSH_RULE 37
+ #define OP_MATCH_RULE 38
+ #define OP_INCR_M 39
+ #define OP_CLEAR_M 40
+ #define OP_ADD_M 41
+ #define OP_POP_M 42
+ #define OP_PUSH_M 43
+ #define OP_SWAPUNDEF 44
+ #define OP_JNUNDEF 45
+ #define OP_JLE 46
+ #define OP_FILESIZE 47
+ #define OP_ENTRYPOINT 48
+ #define OP_INT8 49
+ #define OP_INT16 50
+ #define OP_INT32 51
+ #define OP_UINT8 52
+ #define OP_UINT16 53
+ #define OP_UINT32 54
+ #define OP_CONTAINS 55
+ #define OP_MATCHES 56
+ #define OP_IMPORT 57
+ #define OP_LOOKUP_DICT 58
++#define OP_CONTAINS_STR 59
++#define OP_MATCHES_STR 60
#define OPERATION(operator, op1, op2) \
diff --cc libyara/modules/pe.c
index 7e3b7c8,9318cfb..4b698f8
--- a/libyara/modules/pe.c
+++ b/libyara/modules/pe.c
@@@ -2082,13 -389,16 +2084,16 @@@ int pe_find_version_info_cb
strlcpy_w(key, string->Key, sizeof(key));
strlcpy_w(value, string_value, sizeof(value));
- set_string(value, pe->object, "version_info[%s]", key);
+ set_string(value, sizeof(value), pe->object, "version_info[%s]", key);
+ if (string->Length == 0)
+ break;
+
string = ADD_OFFSET(string, string->Length);
- string = ALIGN_NEXT_DWORD(string);
}
+
+ if (string_table->Length == 0)
+ break;
}
}
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git
More information about the forensics-changes
mailing list