Browse code

Improve fidelity of reporting error conditions from YARA strings and to continue processing additional YARA rules within files where previous string errors are found.

Steven Morgan authored on 2015/05/02 06:15:55
Showing 1 changed files
... ...
@@ -3454,8 +3454,6 @@ static int load_oneyara(YR_RULE *rule, struct cl_engine *engine, unsigned int op
3454 3454
             if (ret != CL_SUCCESS) {
3455 3455
                 str_error++;
3456 3456
                 free(substr);
3457
-                /* suppress the error */
3458
-                ret = CL_SUCCESS;
3459 3457
                 break;
3460 3458
             }
3461 3459
 
... ...
@@ -3824,7 +3822,7 @@ static int cli_loadyara(FILE *fs, struct cl_engine *engine, unsigned int *signo,
3824 3824
         rc = load_oneyara(rule, engine, options, &sigs);
3825 3825
         if (rc != CL_SUCCESS) {
3826 3826
             cli_warnmsg("cli_loadyara: problem parsing yara file %s, yara rule %s\n", dbname, rule->identifier);
3827
-            break;
3827
+            continue;
3828 3828
         }
3829 3829
     }
3830 3830