Browse code

YARA: handle string counting.

Steven Morgan authored on 2015/03/20 05:44:07
Showing 1 changed files
... ...
@@ -638,8 +638,7 @@ int yr_execute_code(
638 638
 #if REAL_YARA
639 639
         push(string->matches[tidx].count);
640 640
 #else
641
-        //TBD: find #clamav matches
642
-        push(0); //TEMP
641
+        push(acdata->lsigcnt[aclsig->id][string->subsig_id]);
643 642
 #endif
644 643
         break;
645 644