[Forensics-changes] [yara] 211/407: Update documentation

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:28:27 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.3.0
in repository yara.

commit 3b2b9fd9b2cba1111884d12e8707df5b91c593bd
Author: Victor Manuel Alvarez <vmalvarez at virustotal.com>
Date:   Fri Nov 7 20:38:01 2014 +0100

    Update documentation
---
 docs/modules/hash.rst | 27 ++++++++++++++++++++-------
 1 file changed, 20 insertions(+), 7 deletions(-)

diff --git a/docs/modules/hash.rst b/docs/modules/hash.rst
index 2ec0861..96890c4 100644
--- a/docs/modules/hash.rst
+++ b/docs/modules/hash.rst
@@ -34,9 +34,10 @@ of your file and create signatures based on those hashes.
 
 .. c:function:: sha1(offset, size)
 
-    Returns the SHA1 hash for *size* bytes starting at *offset*. When scanning a
-    running process the *offset* argument should be a virtual address within
-    the process address space. The returned string is always in lowercase.
+    Returns the SHA1 hash for the *size* bytes starting at *offset*. When
+    scanning a running process the *offset* argument should be a virtual address
+    within the process address space. The returned string is always in
+    lowercase.
 
 .. c:function:: sha1(string)
 
@@ -44,10 +45,22 @@ of your file and create signatures based on those hashes.
 
 .. c:function:: sha256(offset, size)
 
-    Returns the SHA256 hash for *size* bytes starting at *offset*. When scanning a
-    running process the *offset* argument should be a virtual address within
-    the process address space. The returned string is always in lowercase.
+    Returns the SHA256 hash for the *size* bytes starting at *offset*. When
+    scanning a running process the *offset* argument should be a virtual address
+    within the process address space. The returned string is always in
+    lowercase.
 
 .. c:function:: sha256(string)
 
-    Returns the SHA256 hash for the given string.
\ No newline at end of file
+    Returns the SHA256 hash for the given string.
+
+.. c:function:: checksum32(offset, size)
+
+    Returns a 32-bits checksum for the *size* bytes starting at *offset*. The
+    checksum is just the sum of all the bytes (unsigned).
+
+.. c:function:: checksum32(string)
+
+    Returns a 32-bits checksum for the given string. The checksum is just the
+    sum of all the bytes in the string (unsigned).
+

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list