/* Copyright (c) 2013. The YARA Authors. All Rights Reserved. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ #ifndef YR_COMPILER_H #define YR_COMPILER_H #include #include #ifdef REAL_YARA #include #include #include #else #include "yara_arena.h" #include "yara_hash.h" #endif #define YARA_ERROR_LEVEL_ERROR 0 #define YARA_ERROR_LEVEL_WARNING 1 typedef void (*YR_COMPILER_CALLBACK_FUNC)( int error_level, const char* file_name, int line_number, const char* message); typedef struct _YR_COMPILER { int errors; int error_line; int last_error; int last_error_line; int last_result; jmp_buf error_recovery; YR_ARENA* sz_arena; YR_ARENA* rules_arena; YR_ARENA* strings_arena; YR_ARENA* code_arena; YR_ARENA* re_code_arena; YR_ARENA* automaton_arena; YR_ARENA* compiled_rules_arena; YR_ARENA* externals_arena; YR_ARENA* namespaces_arena; YR_ARENA* metas_arena; #ifdef REAL_YARA YR_AC_AUTOMATON* automaton; #endif YR_HASH_TABLE* rules_table; YR_HASH_TABLE* objects_table; YR_NAMESPACE* current_namespace; YR_STRING* current_rule_strings; int current_rule_flags; int namespaces_count; int8_t* loop_address[MAX_LOOP_NESTING]; char* loop_identifier[MAX_LOOP_NESTING]; int loop_depth; int loop_for_of_mem_offset; int allow_includes; char* file_name_stack[MAX_INCLUDE_DEPTH]; int file_name_stack_ptr; FILE* file_stack[MAX_INCLUDE_DEPTH]; int file_stack_ptr; char last_error_extra_info[MAX_COMPILER_ERROR_EXTRA_INFO]; char lex_buf[LEX_BUF_SIZE]; char* lex_buf_ptr; unsigned short lex_buf_len; char include_base_dir[MAX_PATH]; YR_COMPILER_CALLBACK_FUNC callback; /* Compiler fields for ClamAV */ STAILQ_HEAD(rq, _yc_rule) rule_q; STAILQ_HEAD(cs, _yc_string) current_rule_string_q; YR_ARENA* the_arena; uint32_t current_rule_clflags; } YR_COMPILER; #define yr_compiler_set_error_extra_info(compiler, info) \ strlcpy( \ compiler->last_error_extra_info, \ info, \ sizeof(compiler->last_error_extra_info)); \ int _yr_compiler_push_file( YR_COMPILER* compiler, FILE* fh); FILE* _yr_compiler_pop_file( YR_COMPILER* compiler); int _yr_compiler_push_file_name( YR_COMPILER* compiler, const char* file_name); void _yr_compiler_pop_file_name( YR_COMPILER* compiler); int yr_compiler_create( YR_COMPILER** compiler); void yr_compiler_destroy( YR_COMPILER* compiler); void yr_compiler_set_callback( YR_COMPILER* compiler, YR_COMPILER_CALLBACK_FUNC callback); int yr_compiler_add_file( YR_COMPILER* compiler, FILE* rules_file, const char* namespace_, const char* file_name); int yr_compiler_add_string( YR_COMPILER* compiler, const char* rules_string, const char* namespace_); char* yr_compiler_get_error_message( YR_COMPILER* compiler, char* buffer, int buffer_size); char* yr_compiler_get_current_file_name( YR_COMPILER* context); #ifdef REAL_YARA int yr_compiler_define_integer_variable( YR_COMPILER* compiler, const char* identifier, int64_t value); int yr_compiler_define_boolean_variable( YR_COMPILER* compiler, const char* identifier, int value); int yr_compiler_define_string_variable( YR_COMPILER* compiler, const char* identifier, const char* value); int yr_compiler_get_rules( YR_COMPILER* compiler, YR_RULES** rules); #endif #endif