Comments (3)
Out of curiosity, I decided to test this just now with Yara v1.6
(Disclaimer: I have nothing to do with Yara, I'm just a regular user.)
I don't really understand what this bug report is saying, but here are my
observations about " at ":
2 of ($foo*) will...
... always be false if you only have one "$foo1" defined in the strings section.
... be true if you repeat your string twice, even if your input only has a
single occurrence. So,
$foo1="foo"
$foo2="foo"
2 of ($foo*)
will always be true if your input file contains a single "foo" string. In
general, I don't think anyone is ever going to be writing rules like this.
... work correctly if you have three strings defined, and any two of them
appear at least once, for each string. So,
$foo1="foo"
$foo2="bar"
$foo3="buz"
2 of ($foo*)
will match "foobar", but not match "foofoo" or "barbar" Is this the issue?
Original comment by [email protected]
on 1 Jun 2012 at 1:43
from yara-project.
During a brief period of time a buggy version 1.5 having this problem was
available to download. The issue was solved short after that this shouldn't be
a problem with more recent versions.
Original comment by [email protected]
on 15 Aug 2012 at 4:02
- Changed state: Done
from yara-project.
During a brief period of time a buggy version 1.5 having this problem was
available to download. The issue was solved short after that this shouldn't be
a problem with more recent versions.
Original comment by [email protected]
on 15 Aug 2012 at 4:02
from yara-project.
Related Issues (20)
- variable in range using the offset of another variable as last parameter in range will hit even if the second variable does not exists HOT 1
- malfind and yara (volatility 2.2) HOT 1
- Yara-Python DLL Load Failure HOT 3
- RegEx no longer greedy in v1.7 HOT 1
- /usr/bin/ld: error: cannot find -lyara HOT 4
- Infinite loop on certain samples with one particular rule. Regex related. HOT 1
- Fix abort issue on ARM platforms HOT 1
- [yara python]match() method does not accept variable as parameter HOT 1
- Old issue closed but not fixed HOT 1
- Python - read access during match is not read only HOT 1
- Buffer overflow
- latest svn with gcc 4.7.1 build issue HOT 1
- trying to build python-yara 1.7
- yara 1.7 gets stuck. HOT 2
- YARA 1.7 failing to detect a one-byte string at the end of a two-bytes file
- Failure to build on trunk on ubuntu 12.04 x86_64 HOT 2
- yara-python fails to build on OS X 10.8.5 HOT 1
- Uppercase or Lowercase HOT 2
- Unable to compile Yara on OS X HOT 10
- Yara rule working in 2.0 but not in yara 1.6 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from yara-project.