Commit Graph

453 Commits (8efbf4a0cb9be3d954a8d2b29cf729f128558d2e)

Author SHA1 Message Date
Kevin Lin 3f016d0237 ldb: fixed an issue with ':' within pcres incorrectly treated as offsets 10 years ago
Kevin Lin b289385d32 various fixes for windows build 10 years ago
Kevin Lin bc3a2c0f3e removed windows restriction on yara features 10 years ago
Steven Morgan b6ad432280 Fix for unit test failure. 10 years ago
Steven Morgan 4400490cfc Fix memory leak - call _yr_compiler_pop_file_name(). 10 years ago
Steven Morgan 5842265fd9 Enable YARA include directives, import YARA compiler struct and functions, improve YARA parse/lex error messages. 10 years ago
Kevin Lin 2ade8f423f readdb: added error messages for unsupported wildcards for clarity 10 years ago
Kevin Lin 4ffcf308bc alternative code clean-up (cli_altnmsg) 10 years ago
Kevin Lin 4616203b2a load_oneyara: adjusted limitations on yara alternete strings 10 years ago
Kevin Lin 5adf39031a yara: added support for PUA, IGN, and sigload_cb 10 years ago
Steven Morgan d03c18bed3 Fix YARA arena management, improve error reporting, clean up some code. 10 years ago
Steven Morgan 758e74cf66 Improve fidelity of reporting error conditions from YARA strings and to continue processing additional YARA rules within files where previous string errors are found. 10 years ago
Steven Morgan b7999b89c9 YARA: capture offsets in matcher and use for processing YARA condition 'at' clauses. 10 years ago
Kevin Lin 4eae511c68 yara: alternating string verification 10 years ago
Kevin Lin 16d69534d2 yara: added clamav hexstr verification and handling 10 years ago
Steven Morgan e10659a6e1 YARA: implement basic string matching, temporarily disable simple YARA condition to lsig conversions. 10 years ago
Steven Morgan d25549807f Add YARA condition evaluation function. Add support for YARA 'of' clauses. 10 years ago
Kevin Lin 16ec6d8dc1 fullword modifier on regex changed to be closer to yara 10 years ago
Kevin Lin 6dea5b0410 integrated sigopts (modifiers) into pcre subsigs using '+' 10 years ago
Steven Morgan 22b54fdbf6 Revert "Add back a few #ifdef's to prevent unsupported YARA features from terminating with malformed database." 10 years ago
Steven Morgan 70b9c0f306 Add back a few #ifdef's to prevent unsupported YARA features from terminating with malformed database. 10 years ago
Steven Morgan f51f42e95c Capture YARA compiled condition string and anchor in struct cli_ac_lsig. 10 years ago
Kevin Lin 311a0b106d updated PCRE subsig check on no PCRE support for ldb and yara 10 years ago
Kevin Lin 06bd11e1af fixed wildcard issues in yara->clamav conversion 10 years ago
Kevin Lin f22d89ee6b added wide support for word marker char class 10 years ago
Steven Morgan 39d0a152a3 Use YARA arena for rule memory. 10 years ago
Steven Morgan 7f7491099e parser and memory management improvements. 10 years ago
Kevin Lin 48bf9ea190 fixed yara hex string parsing, reslen incorrectly calculated 10 years ago
Kevin Lin 13a232b533 fixed memory issues in sigopts handler 10 years ago
Steven Morgan cc1c1c7d18 Fix memory leaks. 10 years ago
Steven Morgan 324fabbb38 Fix some ClamAV with YARA issues and turn on some more YARA parser features. 10 years ago
Kevin Lin a1482b984e prevent cyclic loops in sigopts_handler 10 years ago
Kevin Lin 8ea346810c moved sigopts handler to separate function 10 years ago
Steven Morgan 90941cad26 Improve YARA error messages. Enable parser yr_parser_check_types() function. 10 years ago
Kevin Lin abec1002b1 string composition now derived from string->length 10 years ago
Kevin Lin e072bb69c7 basis for wide sigopt support 10 years ago
Kevin Lin 348dc986a7 fullword modifier support for anchored signatures 10 years ago
Steven Morgan 4d1a9fa5df Fix source of YARA string length. 10 years ago
Kevin Lin 73b1cbae79 fullword 'f' sigopt handling for ldb and yara 10 years ago
Kevin Lin dc70379a09 converted sigopts from char string to uint8_t 10 years ago
Steven Morgan 3ca6d4c020 YARA work in progress: enable parser functions, add YARA arenas and hash tables. 10 years ago
Kevin Lin a98b86c3a7 simplified a string duplication 10 years ago
Kevin Lin f1dd20b607 force signatures with sigopts to the AC tree over BM 10 years ago
Kevin Lin d10c234b43 changed disabled pcre support debug message to warning 10 years ago
Kevin Lin 4ff617c31b capped the number of yara strings to MAX_LDB_SUBSIGS 10 years ago
Kevin Lin 94ac324efc skips over malformed rules instead of error 10 years ago
Kevin Lin f88cffca17 cleaned out excess yara messages 10 years ago
Kevin Lin bec92cfc2e removed strict yara property interpretation 10 years ago
Kevin Lin 1215ac0fe4 set cli_yaramsg() to debugging mode 10 years ago
Kevin Lin b62dd1dd74 re-added basic yara pcre support 10 years ago