[Forensics-changes] [yara] 146/407: Use not_before and not_after.

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:28:19 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.3.0
in repository yara.

commit 6fc5eedfc09b5d47d2c2b52ae7bcc7b2b0992516
Author: Wesley Shields <wxs at atarininja.org>
Date:   Mon Oct 27 10:03:01 2014 -0400

    Use not_before and not_after.
---
 libyara/modules/pe.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/libyara/modules/pe.c b/libyara/modules/pe.c
index 30bc515..c28ea74 100644
--- a/libyara/modules/pe.c
+++ b/libyara/modules/pe.c
@@ -2467,7 +2467,7 @@ void pe_parse_certificates(
       }
       BIO_read(date_bio, p, date_bio->num_write);
       p[date_bio->num_write] = '\x0';
-      set_string(p, pe->object, "signatures[%i].notBefore", counter);
+      set_string(p, pe->object, "signatures[%i].not_before", counter);
       yr_free(p);
       date_time = X509_get_notAfter(cert);
       ASN1_TIME_print(date_bio, date_time);
@@ -2482,7 +2482,7 @@ void pe_parse_certificates(
         }
         BIO_read(date_bio, p, date_length);
         p[date_length] = '\x0';
-        set_string(p, pe->object, "signatures[%i].notAfter", counter);
+        set_string(p, pe->object, "signatures[%i].not_after", counter);
         yr_free(p);
       }
       BIO_set_close(date_bio, BIO_CLOSE);
@@ -3052,8 +3052,8 @@ begin_declarations;
     declare_integer("version");
     declare_string("algorithm");
     declare_string("serial");
-    declare_string("notBefore");
-    declare_string("notAfter");
+    declare_string("not_before");
+    declare_string("not_after");
   end_struct_array("signatures");
   declare_integer("number_of_signatures");
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list