[Forensics-changes] [yara] 302/407: Define MEAN_BYTES as 127.5.

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:28:39 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.3.0
in repository yara.

commit 35fa585f074ca1a751756a7653cd1fa5db669690
Author: Wesley Shields <wxs at atarininja.org>
Date:   Fri Jan 2 16:51:47 2015 -0500

    Define MEAN_BYTES as 127.5.
    
    This is useful for rules that operate across all possible byte values
    and want to use the mean_err() or mean_deviation() functions.
---
 libyara/modules/math.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/libyara/modules/math.c b/libyara/modules/math.c
index 8da8add..2eee2e5 100644
--- a/libyara/modules/math.c
+++ b/libyara/modules/math.c
@@ -533,6 +533,7 @@ define_function(string_monte_carlo_pi)
 
 begin_declarations;
 
+  declare_double("MEAN_BYTES");
   declare_function("mean_deviation", "iid", "d", data_mean_deviation);
   declare_function("mean_deviation", "sd", "d", string_mean_deviation);
   declare_function("mean_err", "iid", "d", data_mean_err);
@@ -567,7 +568,7 @@ int module_load(
     void* module_data,
     size_t module_data_size)
 {
-
+  set_double(127.5, module_object, "MEAN_BYTES");
   return ERROR_SUCCESS;
 }
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list