You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, there are yr_compiler_define_*_variable functions to define EXTERNAL_VARIABLE_TYPE_* variables, but none of the EXTERNAL_* or yr_compiler_define_* functions allow the user to create OBJECT_TYPE_ARRAY or OBJECT_TYPE_STRUCTURE for more elaborated scanner features.
This would be a nice add for enhanced global variables. I've tried going through without the official functions but I end up clashing with asserts & double free malloc: Hugal31/yara-rust#127
The text was updated successfully, but these errors were encountered:
Moreover, arrays are interesting but may be unnecessary complexity that's why yr_compiler_define_*_variable was designed this way?
For instance in YARA Live Hunting we see the usage of loops for behaviour butgiven the straightforwardness comparison generally seen, loops would probably be better handled by the engine itself rather than the rule such as:
for any cmd in vt.behaviour.command_executions : (
cmd contains "cmd.exe /Q /c"
)
Currently, there are
yr_compiler_define_*_variable
functions to defineEXTERNAL_VARIABLE_TYPE_*
variables, but none of the EXTERNAL_* oryr_compiler_define_*
functions allow the user to create OBJECT_TYPE_ARRAY or OBJECT_TYPE_STRUCTURE for more elaborated scanner features.This would be a nice add for enhanced global variables. I've tried going through without the official functions but I end up clashing with asserts & double free malloc:
Hugal31/yara-rust#127
The text was updated successfully, but these errors were encountered: