March 25, 2015
View 16d6953

yara: added clamav hexstr verification and handling yara: handles lack of 'wide' sigopt within load_oneyara yara: upgraded some suppressed debug messages to warnings

Kevin Lin authored on 2015/03/25 06:48:54
March 20, 2015
View e10659a

YARA: implement basic string matching, temporarily disable simple YARA condition to lsig conversions.

Steven Morgan authored on 2015/03/20 00:59:35
March 19, 2015
View d255498

Add YARA condition evaluation function. Add support for YARA 'of' clauses.

Steven Morgan authored on 2015/03/19 07:26:59
March 10, 2015
View 16ec6d8

fullword modifier on regex changed to be closer to yara

Kevin Lin authored on 2015/03/10 07:02:17
View 6dea5b0

integrated sigopts (modifiers) into pcre subsigs using '+' re-factored sigopts_handler() code TODO: wide support for regex strings

Kevin Lin authored on 2015/03/10 06:17:15
March 7, 2015
View 22b54fd

Revert "Add back a few #ifdef's to prevent unsupported YARA features from terminating with malformed database." - to be handled by pre-filtering the YARA rules.

Steven Morgan authored on 2015/03/07 08:16:15
View 70b9c0f

Add back a few #ifdef's to prevent unsupported YARA features from terminating with malformed database.

Steven Morgan authored on 2015/03/07 07:29:47
View e2617a2

Merge branch 'features/yara' of git.clam.sourcefire.com:/var/lib/git/clamav-devel into features/yara

Steven Morgan authored on 2015/03/07 07:11:00
View f51f42e

Capture YARA compiled condition string and anchor in struct cli_ac_lsig.

Steven Morgan authored on 2015/03/07 07:10:47
View 311a0b1

updated PCRE subsig check on no PCRE support for ldb and yara fixed an issue where partial yara rules could be loaded reason: segfaults are bad

Kevin Lin authored on 2015/03/07 05:14:15
View 06bd11e

fixed wildcard issues in yara->clamav conversion

Kevin Lin authored on 2015/03/07 02:40:24
February 27, 2015
View f22d89e

added wide support for word marker char class reason: differs from what is expected in yara TODO: handle this case for all character classes/cases

Kevin Lin authored on 2015/02/27 01:21:34
February 26, 2015
View 39d0a15

Use YARA arena for rule memory.

Steven Morgan authored on 2015/02/26 04:52:33
View 4a05ba5

Merge branch 'features/yara' of git.clam.sourcefire.com:/var/lib/git/clamav-devel into features/yara

Steven Morgan authored on 2015/02/26 01:14:39
View 7f74910

parser and memory management improvements.

Steven Morgan authored on 2015/02/26 01:14:27