Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update to Yara 4.3 #6

Merged
merged 32 commits into from
Mar 5, 2023
Merged

Update to Yara 4.3 #6

merged 32 commits into from
Mar 5, 2023

Commits on Mar 5, 2023

  1. feat: update yara-rust for yara 4.3.0 master

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    2b6d5e6 View commit details
    Browse the repository at this point in the history

  2. feat: update to 4.3, adapt existing tests

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    5404b70 View commit details
    Browse the repository at this point in the history

  3. feat: import new conformance tests from yara 4.3

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    a0d7b2d View commit details
    Browse the repository at this point in the history

  4. feat: add negation syntax in hex strings

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    258ddae View commit details
    Browse the repository at this point in the history

  5. feat: add to_string method to math module

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    d05b377 View commit details
    Browse the repository at this point in the history

  6. feat: add string module

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    69f807f View commit details
    Browse the repository at this point in the history

  7. fix: properly handle negative values in string.to_int

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    87e82fc View commit details
    Browse the repository at this point in the history

  8. fix: properly handle non unicode strings in string.to_int

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    ecdbbf6 View commit details
    Browse the repository at this point in the history

  9. fix: properly handle radix 0 in string.to_int

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    89b44d2 View commit details
    Browse the repository at this point in the history

  10. test: add conformance tests on string module

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    56aadda View commit details
    Browse the repository at this point in the history

  11. feat: add rva value in imported functions in pe module

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    90ec39e View commit details
    Browse the repository at this point in the history

  12. feat: add (delayed_)import_rva functions in pe module

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    5c6bbb1 View commit details
    Browse the repository at this point in the history

  13. feat: add pe.rich_signature.version_data field

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    56c9b9c View commit details
    Browse the repository at this point in the history

  14. feat: properly handle sections with VirtualSize == 0 

    Update boreal-object fork to handle this case.
Import binaries for the yara PR and add coverage tests on them.
    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    ba75fa2 View commit details
    Browse the repository at this point in the history

  15. fix: properly handle weird ranges in count in range op 

    Do not return undefined in the "#var in (from..to)" expression when the
range bounds are weird. Instead, act as if the values are valid.
    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    2f8b398 View commit details
    Browse the repository at this point in the history

  16. feat: implement iterator of bytes literals

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    cdf6070 View commit details
    Browse the repository at this point in the history

  17. test: add invalid files tests on new bytes iterator

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    707c51f View commit details
    Browse the repository at this point in the history

  18. feat: add for expression with 'at' keyword

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    57564aa View commit details
    Browse the repository at this point in the history

  19. test: enable some more new 4.3 conformance tests

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    77be8ed View commit details
    Browse the repository at this point in the history

  20. feat: add import_md5 method in elf module

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    48f35bc View commit details
    Browse the repository at this point in the history

  21. feat: implement telfhash function in elf module

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    a8453f1 View commit details
    Browse the repository at this point in the history

  22. feat: replace openssl use with authenticode-parser lib

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    7562fd3 View commit details
    Browse the repository at this point in the history

  23. feat: add all new fields in pe signatures

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    26e4d8b View commit details
    Browse the repository at this point in the history

  24. feat: implement pe::is_signed flag

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    6f47b1c View commit details
    Browse the repository at this point in the history

  25. feat: move authenticode init token in pe module struct

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    d331f5f View commit details
    Browse the repository at this point in the history

  26. feat: expose unsafeness of pe module with authenticode

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    e2b6ca7 View commit details
    Browse the repository at this point in the history

  27. test: use once_cell for the pe module handling 

    This avoids the use of the const version of Mutex::new, which is not
available in rust 1.62.
    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    b89dd0b View commit details
    Browse the repository at this point in the history

  28. feat: add module names option in boreal-cli 

    The particularity is that this option acts as its own mode: if given, it
will print the names and exit, so the required arguments (rules & input)
are not required if this option is specified.

This was not trivial to find how to express this with clap, but the
required_unless_present seems to work.
    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    fe9c84c View commit details
    Browse the repository at this point in the history

  29. test: re-enable module coverage tests

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    607652a View commit details
    Browse the repository at this point in the history

  30. test: convert 1561 tests into module coverage tests

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    745f7b8 View commit details
    Browse the repository at this point in the history

  31. test: adapt a test to circumvent yara compile checks

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    b1a141a View commit details
    Browse the repository at this point in the history

  32. chore: update Changelog on yara 4.3 changes

    @vthib
    vthib committed Mar 5, 2023
    Configuration menu
    Copy the full SHA
    3bcfced View commit details
    Browse the repository at this point in the history