Commit Graph

3419 Commits (440410c7a734c20add2eeed2f704d6ba52a6b211)

Author SHA1 Message Date
Steven Morgan 3ca6d4c020 YARA work in progress: enable parser functions, add YARA arenas and hash tables. 10 years ago
Kevin Lin 22bcb9b287 bb#11212 - alternate fix in MEW unpacker 10 years ago
Kevin Lin 87c9b7429f Revert "bb#11212 - fixed section boundary mismatch in MEW unpacker" 10 years ago
Kevin Lin f1dd20b607 force signatures with sigopts to the AC tree over BM 10 years ago
Steven Morgan 0cc83247bc bb11264 - patch for 'possible' heap overflow submitted by the Debian team. 10 years ago
Kevin Lin d10c234b43 changed disabled pcre support debug message to warning 10 years ago
Steven Morgan 016b79e682 minor change of yara parse code II. 10 years ago
Steven Morgan 46dc3c4a53 minor change of yara parse code. 10 years ago
Kevin Lin 4ff617c31b capped the number of yara strings to MAX_LDB_SUBSIGS 10 years ago
Kevin Lin 94ac324efc skips over malformed rules instead of error 10 years ago
Kevin Lin f88cffca17 cleaned out excess yara messages 10 years ago
Kevin Lin bec92cfc2e removed strict yara property interpretation 10 years ago
Kevin Lin 1215ac0fe4 set cli_yaramsg() to debugging mode 10 years ago
Kevin Lin b62dd1dd74 re-added basic yara pcre support 10 years ago
Kevin Lin a576a0368b retcodes added to parse_yara_hex_string() 10 years ago
Kevin Lin 39e05dbdf3 reorganization and 'static' modifiers 10 years ago
Kevin Lin 72747e08dd implemented yara sigopts (only nocase operational) 10 years ago
Kevin Lin f597585be0 fixed cleanup and error reporting in cli_loadyara() 10 years ago
Kevin Lin b673191549 re-added support for 'generic' strings 10 years ago
Kevin Lin ea6e8cc91f added additional malformed yara string detection 10 years ago
Kevin Lin ddc4030fba different initialization for ytable 10 years ago
Kevin Lin a0ab171d55 print yara loading summary only is yara rules are detected 10 years ago
Kevin Lin 9caff17ad3 logical signatures loading now uses init_tdb() 10 years ago
Kevin Lin 3dafe2971e fixed yara compiler memory leaks (valgrind) 10 years ago
Kevin Lin bb2ebd6740 fixed tdb uninitialized conditional jumps (valgrind) 10 years ago
Kevin Lin 814931b906 reconnected older yara loading stats tracking 10 years ago
Kevin Lin a684f7d8bd created init_tdb() shared between ldb and yara 10 years ago
Kevin Lin c58e2fdbe8 quick implementation of ystring table 10 years ago
Kevin Lin 5765c290b4 added structures for yara string table 10 years ago
Kevin Lin f4265e07eb [WIP] more robust yara string loading 10 years ago
Kevin Lin b5b3fecd6c unioned lsig logic and future yara conditional 10 years ago
Kevin Lin a1924d1407 added nocase support for anchored hexsigs 10 years ago
Kevin Lin 82cc35c017 allow anchored hexsigs to use single numbers for whitespace 10 years ago
Steven Morgan f092d0a1a1 bb11260: fix compile error when './configure --disable-pthreads' is specified. 10 years ago
Kevin Lin 3e265c461c added direct memory freeing of cli_ac_list 10 years ago
Kevin Lin af1edc184d additional fixes to nocase yara integration 10 years ago
Kevin Lin 31ab943ac1 fix to yara integration with nocase patterns 10 years ago
Kevin Lin 925931bcbb yara plugin for nocase strings 10 years ago
Kevin Lin 51ca644c6b implemented second nocase AC matcher using full enumerations 10 years ago
Kevin Lin 23d7c6e6f4 removed nocase changes to ac tree operation 10 years ago
Kevin Lin 0d3609c58f autojunk'd 10 years ago
Kevin Lin 08db17431b bb#11254 - added --with-llvm-linking option to specify system-llvm linking method 10 years ago
Kevin Lin 3897b37504 bb#11254 - removed built-in llvm configure check 10 years ago
Kevin Lin 7fc5eab81a finished support for AC trie nocase variant 10 years ago
Kevin Lin a02acd50b6 [WIP] added nocase support to clamav ac algorithm 10 years ago
Steven Morgan b897e2ecf6 add generated yara [ch] files to git repo. 10 years ago
Kevin Lin f66533de48 fixed an incorrect return value for magic_scandesc 11 years ago
Kevin Lin a316630a2e autojunk'd 11 years ago
Kevin Lin 571d834910 bb#11238 - added missing PDF preclass operations 11 years ago
Steven Morgan df085913a5 bb11233 - fix a strange bus error on Mac OS X PPC when using debug mode. 11 years ago