[Forensics-changes] [yara] 193/407: Make WIN_CERTIFICATE declaration available in Windows

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:28:25 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.3.0
in repository yara.

commit 1ab5a432c250dea617e9752c5cb6d051951f43fd
Author: Victor M. Alvarez <plusvic at gmail.com>
Date:   Wed Nov 5 11:36:22 2014 +0100

    Make WIN_CERTIFICATE declaration available in Windows
---
 libyara/include/yara/pe.h | 33 +++++++++++++++++----------------
 1 file changed, 17 insertions(+), 16 deletions(-)

diff --git a/libyara/include/yara/pe.h b/libyara/include/yara/pe.h
index fa97bdf..9951ab8 100644
--- a/libyara/include/yara/pe.h
+++ b/libyara/include/yara/pe.h
@@ -302,22 +302,6 @@ typedef struct _IMAGE_EXPORT_DIRECTORY {
 } IMAGE_EXPORT_DIRECTORY, *PIMAGE_EXPORT_DIRECTORY;
 
 
-#define WIN_CERT_REVISION_1_0 0x0100
-#define WIN_CERT_REVISION_2_0 0x0200
-
-#define WIN_CERT_TYPE_X509             0x0001
-#define WIN_CERT_TYPE_PKCS_SIGNED_DATA 0x0002
-#define WIN_CERT_TYPE_RESERVED_1       0x0003
-#define WIN_CERT_TYPE_TS_STACK_SIGNED  0x0004
-
-typedef struct _WIN_CERTIFICATE {
-    DWORD Length;
-    WORD  Revision;
-    WORD  CertificateType;
-    BYTE  Certificate[1];
-} WIN_CERTIFICATE, *PWIN_CERTIFICATE;
-
-
 typedef struct _IMAGE_IMPORT_DESCRIPTOR {
     union {
         DWORD Characteristics;
@@ -396,6 +380,23 @@ typedef struct _VERSION_INFO {
     char   Key[0];
 } VERSION_INFO, *PVERSION_INFO;
 
+
+#define WIN_CERT_REVISION_1_0 0x0100
+#define WIN_CERT_REVISION_2_0 0x0200
+
+#define WIN_CERT_TYPE_X509             0x0001
+#define WIN_CERT_TYPE_PKCS_SIGNED_DATA 0x0002
+#define WIN_CERT_TYPE_RESERVED_1       0x0003
+#define WIN_CERT_TYPE_TS_STACK_SIGNED  0x0004
+
+typedef struct _WIN_CERTIFICATE {
+    DWORD Length;
+    WORD  Revision;
+    WORD  CertificateType;
+    BYTE  Certificate[1];
+} WIN_CERTIFICATE, *PWIN_CERTIFICATE;
+
+
 //
 // Rich signature.
 // http://www.ntcore.com/files/richsign.htm

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list