mirror of
https://github.com/radareorg/radare2.git
synced 2025-01-31 10:22:37 +00:00
Remove yara (moved to radare2-extras). Installable via sys/yara.sh
This commit is contained in:
pancake
parent
89d1991db2
commit
1afd12e89b
@ -1592,7 +1592,7 @@ R_API int r_core_cmd(RCore *core, const char *cstr, int log) {
|
||||
const char* help_msg[] = {
|
||||
"Usage:", ":[plugin] [args]", "",
|
||||
":", "", "list RCore plugins",
|
||||
":yara", "", "run yara plugin",
|
||||
":java", "", "run java plugin",
|
||||
NULL};
|
||||
r_core_cmd_help (core, help_msg);
|
||||
return 0;
|
||||
|
||||
@ -1,502 +0,0 @@
|
||||
/* radare - LGPLv3 - Copyright 2014 jvoisin <julien.voisin@dustri.org> */
|
||||
|
||||
#include <dirent.h>
|
||||
|
||||
#include <r_core.h>
|
||||
#include <r_lib.h>
|
||||
|
||||
#include "r_yara.h"
|
||||
|
||||
#undef R_API
|
||||
#define R_API static
|
||||
#undef R_IPI
|
||||
#define R_IPI static
|
||||
|
||||
/*
|
||||
* YR_RULE->tag is a special structure holding the rule's tags.
|
||||
* It is a concatenated list of string with a finishing NULL byte.
|
||||
* See example below:
|
||||
* tagNULLtag2NULLtag3NULLNULL
|
||||
*/
|
||||
|
||||
static YR_COMPILER* compiler;
|
||||
static void* libyara;
|
||||
|
||||
static void (*r_yr_initialize)(void) = NULL;
|
||||
static int (*r_yr_compiler_add_file)(
|
||||
YR_COMPILER* compiler,
|
||||
FILE* rules_file,
|
||||
const char* namespace_);
|
||||
static int (*r_yr_compiler_add_string)(
|
||||
YR_COMPILER* compiler,
|
||||
const char* rules_string,
|
||||
const char* namespace_);
|
||||
static void (*r_yr_finalize)(void);
|
||||
static int (*r_yr_compiler_create)( YR_COMPILER** compiler);
|
||||
static void (*r_yr_compiler_destroy)( YR_COMPILER* compiler);
|
||||
static int (*r_yr_rules_destroy) (YR_RULES* rules);
|
||||
static char* (*r_yr_compiler_get_error_message)
|
||||
(YR_COMPILER* compiler, char* buf, int buff_size);
|
||||
|
||||
static int (*r_yr_compiler_push_file_name)(
|
||||
YR_COMPILER* compiler,
|
||||
const char* file_name);
|
||||
static int (*r_yr_compiler_get_rules)(
|
||||
YR_COMPILER* compiler,
|
||||
YR_RULES** rules);
|
||||
static int (*r_yr_rules_scan_mem)(
|
||||
YR_RULES* rules,
|
||||
uint8_t* buffer,
|
||||
size_t buffer_size,
|
||||
YR_CALLBACK_FUNC callback,
|
||||
void* user_data,
|
||||
int fast_scan_mode,
|
||||
int timeout) = NULL;
|
||||
|
||||
|
||||
static int callback(int message, YR_RULE* rule, void* data);
|
||||
static int r_cmd_yara_add (const RCore* core, const char* input);
|
||||
static int r_cmd_yara_add_file (const char* rules_path);
|
||||
static int r_cmd_yara_call(void *user, const char *input);
|
||||
static int r_cmd_yara_clear();
|
||||
static int r_cmd_yara_help(const RCore* core);
|
||||
static int r_cmd_yara_init(const RCore* core);
|
||||
static int r_cmd_yara_process(const RCore* core, const char* input);
|
||||
static int r_cmd_yara_scan(const RCore* core);
|
||||
static int r_cmd_yara_load_default_rules (const RCore* core);
|
||||
|
||||
static const char* yara_rule_template = "rule RULE_NAME {\n\tstrings:\n\n\tcondition:\n}";
|
||||
|
||||
static int callback (int message, YR_RULE* rule, void* data) {
|
||||
if (message == CALLBACK_MSG_RULE_MATCHING)
|
||||
r_cons_printf ("%s\n", rule->identifier);
|
||||
return CALLBACK_CONTINUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_scan(const RCore* core) {
|
||||
YR_RULES* rules;
|
||||
void* buffer;
|
||||
int result;
|
||||
const unsigned int buffer_size = r_io_size (core->io);
|
||||
|
||||
if (buffer_size < 1) {
|
||||
eprintf ("Invalid file size\n");
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
if (r_yr_compiler_get_rules (compiler, &rules) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Unable to get rules\n");
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
buffer = malloc (buffer_size);
|
||||
if (!buffer) {
|
||||
eprintf ("Something went wrong during memory allocation\n");
|
||||
r_yr_rules_destroy (rules);
|
||||
return R_FALSE;
|
||||
}
|
||||
result = r_io_read_at (core->io, 0L, buffer, buffer_size);
|
||||
if (!result) {
|
||||
eprintf ("Something went wrong during r_io_read_at\n");
|
||||
free (buffer);
|
||||
r_yr_rules_destroy (rules);
|
||||
return result;
|
||||
}
|
||||
|
||||
r_yr_rules_scan_mem (rules, buffer, buffer_size, callback, NULL, 0, 0);
|
||||
|
||||
r_yr_rules_destroy (rules);
|
||||
free (buffer);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_show(const char * name) {
|
||||
YR_RULES* rules;
|
||||
YR_RULE* rule;
|
||||
|
||||
if (r_yr_compiler_get_rules (compiler, &rules) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Unable to get rules\n");
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
rule = rules->rules_list_head;
|
||||
while (!RULE_IS_NULL(rule)) {
|
||||
if (r_str_casestr (rule->identifier, name)) {
|
||||
r_cons_printf ("%s\n", rule->identifier);
|
||||
}
|
||||
++rule;
|
||||
}
|
||||
r_yr_rules_destroy (rules);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_tags() {
|
||||
/* List tags from all the different loaded rules */
|
||||
YR_RULES* rules;
|
||||
YR_RULE* rule;
|
||||
int tag_length;
|
||||
char * tag_name;
|
||||
RListIter *iter;
|
||||
RList *tag_list = r_list_new();
|
||||
tag_list->free = free;
|
||||
|
||||
if (r_yr_compiler_get_rules (compiler, &rules) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Unable to get rules\n");
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
r_list_free (tag_list);
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
rule = rules->rules_list_head;
|
||||
while (! RULE_IS_NULL(rule)) {
|
||||
tag_name = rule->tags;
|
||||
tag_length = tag_name != NULL ? strlen(tag_name) : 0;
|
||||
|
||||
while (tag_length > 0) {
|
||||
if (! r_list_find (tag_list, tag_name, (RListComparator)strcmp)) {
|
||||
r_list_add_sorted (tag_list,
|
||||
strdup (tag_name), (RListComparator)strcmp);
|
||||
}
|
||||
/*+1 to jump the NULL byte,*/
|
||||
tag_name += tag_length + 1;
|
||||
tag_length = strlen (tag_name);
|
||||
}
|
||||
++rule;
|
||||
}
|
||||
r_yr_rules_destroy (rules);
|
||||
|
||||
r_cons_printf ("[YARA tags]\n");
|
||||
r_list_foreach (tag_list, iter, tag_name) {
|
||||
r_cons_printf ("%s\n", tag_name);
|
||||
}
|
||||
|
||||
r_list_free (tag_list);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_tag(const char * search_tag) {
|
||||
/* List rules with tag search_tag */
|
||||
YR_RULES* rules;
|
||||
YR_RULE* rule;
|
||||
int tag_length, show_rule = R_FALSE;
|
||||
char * tag_name;
|
||||
|
||||
if (r_yr_compiler_get_rules (compiler, &rules) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Unable to get rules\n");
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
rule = rules->rules_list_head;
|
||||
while (! RULE_IS_NULL(rule)) {
|
||||
tag_name = rule->tags;
|
||||
tag_length = tag_name != NULL ? strlen(tag_name) : 0;
|
||||
|
||||
while (tag_length > 0) {
|
||||
if (r_str_casestr (tag_name, search_tag)) {
|
||||
show_rule = R_TRUE;
|
||||
break;
|
||||
}
|
||||
tag_name += tag_length + 1;
|
||||
tag_length = strlen(tag_name);
|
||||
}
|
||||
|
||||
if (show_rule) {
|
||||
r_cons_printf("%s\n", rule->identifier);
|
||||
show_rule = R_FALSE;
|
||||
}
|
||||
++rule;
|
||||
}
|
||||
r_yr_rules_destroy (rules);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_list () {
|
||||
YR_RULES* rules;
|
||||
YR_RULE* rule;
|
||||
|
||||
if (r_yr_compiler_get_rules (compiler, &rules) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Unable to get rules\n");
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
rule = rules->rules_list_head;
|
||||
while (!RULE_IS_NULL(rule)) {
|
||||
r_cons_printf ("%s\n", rule->identifier);
|
||||
++rule;
|
||||
}
|
||||
r_yr_rules_destroy (rules);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_clear () {
|
||||
r_yr_compiler_destroy (compiler);
|
||||
if (r_yr_compiler_create (&compiler) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Unable to re-create the yara compiler\n");
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
return R_FALSE;
|
||||
}
|
||||
eprintf ("Rules cleared\n");
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_add(const RCore* core, const char* input) {
|
||||
char* modified_template;
|
||||
char* old_template;
|
||||
int result, i, continue_edit;
|
||||
|
||||
for( i = 0; input[i] != '\0'; i++) {
|
||||
if (input[i] != ' ') {
|
||||
return r_cmd_yara_add_file (input + i);
|
||||
}
|
||||
}
|
||||
|
||||
old_template = strdup(yara_rule_template);
|
||||
do {
|
||||
modified_template = r_core_editor (core, NULL, old_template);
|
||||
free(old_template);
|
||||
if (!modified_template) {
|
||||
eprintf("Something happened with the temp file");
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
result = r_yr_compiler_add_string (compiler, modified_template, NULL);
|
||||
if( result > 0 ) {
|
||||
char buf[64];
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
|
||||
continue_edit = r_cons_yesno('y', "Do you want to continue editing the rule? [y]/n\n");
|
||||
if (!continue_edit) {
|
||||
free(modified_template);
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
old_template = modified_template;
|
||||
|
||||
/*we need to reset the errors counter*/
|
||||
compiler->errors = 0;
|
||||
}
|
||||
} while (result > 0);
|
||||
|
||||
free(modified_template);
|
||||
r_cons_printf ("Rule successfully added.\n");
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_add_file(const char* rules_path) {
|
||||
FILE* rules_file;
|
||||
int result;
|
||||
|
||||
if (!rules_path){
|
||||
eprintf ("Please tell me what am I supposed to load\n");
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
rules_file = r_sandbox_fopen (rules_path, "r");
|
||||
if (!rules_file) {
|
||||
eprintf ("Unable to open %s\n", rules_path);
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
if (r_yr_compiler_push_file_name (compiler, rules_path) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Error: %s : %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)),
|
||||
rules_path);
|
||||
|
||||
fclose (rules_file);
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
/*reset the errors counter, otherwise multiple runs will fail after old error*/
|
||||
compiler->errors = 0;
|
||||
result = r_yr_compiler_add_file (compiler, rules_file, NULL);
|
||||
fclose (rules_file);
|
||||
if (result > 0) {
|
||||
char buf[64];
|
||||
eprintf ("Error: %s : %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)),
|
||||
rules_path);
|
||||
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_help(const RCore* core) {
|
||||
const char * help_message[] = {
|
||||
"Usage: yara", "", " Yara plugin",
|
||||
"add", " [file]", "Add yara rules from file, or open $EDITOR with yara rule template",
|
||||
"clear", "", "Clear all rules",
|
||||
"help", "", "Show this help",
|
||||
"list", "", "List all rules",
|
||||
"scan", "", "Scan the current file",
|
||||
"show", " name", "Show rules containing name",
|
||||
"tag", " name", "List rules with tag 'name'",
|
||||
"tags", "", "List tags from the loaded rules",
|
||||
NULL
|
||||
};
|
||||
|
||||
r_core_cmd_help (core, help_message);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_process(const RCore* core, const char* input) {
|
||||
if (!strncmp (input, "add", 3))
|
||||
return r_cmd_yara_add (core, input + 3);
|
||||
else if (!strncmp (input, "clear", 4))
|
||||
return r_cmd_yara_clear ();
|
||||
else if (!strncmp (input, "list", 4))
|
||||
return r_cmd_yara_list ();
|
||||
else if (!strncmp (input, "scan", 4))
|
||||
return r_cmd_yara_scan (core);
|
||||
else if (!strncmp (input, "show", 4))
|
||||
return r_cmd_yara_show (input + 5);
|
||||
else if (!strncmp (input, "tags", 4))
|
||||
return r_cmd_yara_tags ();
|
||||
else if (!strncmp (input, "tag ", 4))
|
||||
return r_cmd_yara_tag (input + 4);
|
||||
else
|
||||
return r_cmd_yara_help (core);
|
||||
}
|
||||
|
||||
static int r_cmd_yara_call(void *user, const char *input) {
|
||||
const RCore* core = (RCore*) user;
|
||||
if (strncmp (input, "yara", 4))
|
||||
return R_FALSE;
|
||||
else if (strncmp (input, "yara ", 5))
|
||||
return r_cmd_yara_help (core);
|
||||
const char *args = input+4;
|
||||
if (r_yr_initialize == NULL)
|
||||
if (!r_cmd_yara_init (core))
|
||||
return R_TRUE;
|
||||
if (*args)
|
||||
args++;
|
||||
r_cmd_yara_process (core, args);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_load_default_rules(const RCore* core) {
|
||||
#define YARA_PATH R2_PREFIX "/share/radare2/" R2_VERSION "/yara/"
|
||||
RListIter* iter = NULL;
|
||||
char* filename, *complete_path;
|
||||
char* rules;
|
||||
RList* list = r_sys_dir (YARA_PATH);
|
||||
|
||||
r_list_foreach (list, iter, filename) {
|
||||
if (filename[0] != '.') { // skip '.', '..' and hidden files
|
||||
complete_path = r_str_concat (strdup (YARA_PATH), filename);
|
||||
rules = (char*)r_file_gzslurp (complete_path, NULL, R_TRUE);
|
||||
if (r_yr_compiler_add_string (compiler, rules, NULL) > 0) {
|
||||
char buf[64];
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
}
|
||||
free(rules);
|
||||
free (complete_path);
|
||||
}
|
||||
}
|
||||
r_list_free (list);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_init(const RCore* core) {
|
||||
libyara = r_lib_dl_open ("libyara."R_LIB_EXT);
|
||||
if (!libyara) {
|
||||
eprintf ("Cannot find libyara\n");
|
||||
return R_FALSE;
|
||||
}
|
||||
#define CHECKSYM(x)\
|
||||
r_##x = r_lib_dl_sym (libyara, #x);
|
||||
#define LOADSYM(x) { \
|
||||
CHECKSYM(x);\
|
||||
if (!r_##x) { \
|
||||
eprintf ("dlsym: cannot find r_"#x);\
|
||||
return R_FALSE;\
|
||||
} \
|
||||
}
|
||||
CHECKSYM (yr_initialize);
|
||||
if (!r_yr_initialize) {
|
||||
eprintf ("Cannot find yr_initialize in libyara (<2.1 ?)\n");
|
||||
return R_FALSE;
|
||||
}
|
||||
LOADSYM (yr_compiler_add_file);
|
||||
LOADSYM (yr_compiler_add_string);
|
||||
LOADSYM (yr_compiler_create);
|
||||
LOADSYM (yr_compiler_destroy);
|
||||
LOADSYM (yr_compiler_get_error_message)
|
||||
LOADSYM (yr_compiler_get_rules);
|
||||
LOADSYM (yr_compiler_push_file_name);
|
||||
LOADSYM (yr_finalize);
|
||||
LOADSYM (yr_rules_scan_mem);
|
||||
LOADSYM (yr_rules_destroy);
|
||||
|
||||
r_yr_initialize ();
|
||||
|
||||
if (r_yr_compiler_create (&compiler) != ERROR_SUCCESS) {
|
||||
char buf[64];
|
||||
eprintf ("Unable to create the yara compiler\n");
|
||||
eprintf ("Error: %s\n",
|
||||
r_yr_compiler_get_error_message (compiler, buf, sizeof (buf)));
|
||||
r_yr_finalize ();
|
||||
return R_FALSE;
|
||||
}
|
||||
|
||||
r_cmd_yara_load_default_rules (core);
|
||||
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
static int r_cmd_yara_deinit(){
|
||||
if (r_yr_initialize != NULL) {
|
||||
if (r_yr_compiler_destroy)
|
||||
r_yr_compiler_destroy (compiler);
|
||||
if (r_yr_finalize)
|
||||
r_yr_finalize();
|
||||
r_yr_initialize = NULL;
|
||||
r_lib_dl_close (libyara);
|
||||
}
|
||||
return R_TRUE;
|
||||
}
|
||||
|
||||
RCorePlugin r_core_plugin_yara = {
|
||||
.name = "yara",
|
||||
.desc = "YARA integration",
|
||||
.license = "LGPL",
|
||||
.call = r_cmd_yara_call,
|
||||
.init = NULL, // init is performed in call if needed
|
||||
.deinit = r_cmd_yara_deinit
|
||||
};
|
||||
|
||||
#ifndef CORELIB
|
||||
RLibStruct radare_plugin = {
|
||||
.type = R_LIB_TYPE_CORE,
|
||||
.data = &r_core_plugin_yara,
|
||||
};
|
||||
#endif
|
||||
@ -1,20 +0,0 @@
|
||||
CORE_OBJ_YARA=core_yara.o
|
||||
|
||||
#CORE_SHARED_YARA=../../shlr/yara/code.o
|
||||
#CORE_SHARED_YARA+=../../shlr/yara/class.o
|
||||
#CORE_SHARED_YARA+=../../shlr/yara/ops.o
|
||||
|
||||
CORE_SHARED2_YARA=$(addprefix ../,${CORE_SHARED_YARA})
|
||||
CORE_OBJ_YARA+=${CORE_SHARED2_YARA}
|
||||
CORE_SHARED2_YARA=
|
||||
|
||||
STATIC_OBJ+=${CORE_OBJ_YARA}
|
||||
#SHARED_OBJ+=${CORE_OBJ_YARA}
|
||||
CORE_TARGET_YARA=core_yara.${EXT_SO}
|
||||
|
||||
ALL_TARGETS+=${CORE_TARGET_YARA}
|
||||
|
||||
${CORE_TARGET_YARA}: ${CORE_OBJ_YARA}
|
||||
${CC} $(call libname,core_yara) ${CFLAGS} \
|
||||
-o core_yara.${EXT_SO} \
|
||||
${CORE_OBJ_YARA} ${CORE_SHARED2_YARA}
|
||||
@ -487,7 +487,6 @@ R_API void r_core_task_join (RCore *core, RCoreTask *task);
|
||||
/* PLUGINS */
|
||||
extern RCorePlugin r_core_plugin_java;
|
||||
extern RCorePlugin r_core_plugin_anal;
|
||||
extern RCorePlugin r_core_plugin_yara;
|
||||
|
||||
#endif
|
||||
|
||||
|
||||
@ -117,7 +117,6 @@ bp.mips
|
||||
bp.ppc
|
||||
core.anal
|
||||
core.java
|
||||
core.yara
|
||||
crypto.aes
|
||||
debug.native
|
||||
debug.esil
|
||||
|
||||
Binary file not shown.
Binary file not shown.
7
sys/extras.sh
Executable file
7
sys/extras.sh
Executable file
@ -0,0 +1,7 @@
|
||||
#!/bin/sh
|
||||
|
||||
git clone https://github.com/radare/radare2-extras
|
||||
cd radare2-extras
|
||||
./configure --prefix=/usr
|
||||
make
|
||||
sudo make symstall
|
||||
23
sys/yara.sh
23
sys/yara.sh
@ -3,6 +3,7 @@ PREFIX=/usr
|
||||
MAKE=make
|
||||
SUDO=sudo
|
||||
|
||||
|
||||
# https://raw.githubusercontent.com/sroberts/peid4yara/master/peid.yar
|
||||
#if [ ! -f shlr/yara/peid.yar ]; then
|
||||
#(
|
||||
@ -12,11 +13,27 @@ SUDO=sudo
|
||||
#)
|
||||
#fi
|
||||
|
||||
rm -rf yara
|
||||
git clone https://github.com/plusvic/yara.git || exit 1
|
||||
if [ ! -d yara ]; then
|
||||
git clone https://github.com/plusvic/yara.git || exit 1
|
||||
fi
|
||||
cd yara || exit 1
|
||||
# working yara2 version
|
||||
git reset --hard 880c268ce0b98046a476784c412d9e91573c8a08
|
||||
sh bootstrap.sh
|
||||
./configure --prefix=${PREFIX} || exit 1
|
||||
${MAKE} CFLAGS=-DYYDEBUG=0 || exit 1
|
||||
exec ${SUDO} ${MAKE} install
|
||||
${SUDO} ${MAKE} install
|
||||
|
||||
|
||||
if [ ! -d radare2-extras ]; then
|
||||
git clone https://github.com/radare/radare2-extras
|
||||
fi
|
||||
|
||||
( cd radare2-extras
|
||||
./configure --prefix=/usr
|
||||
( cd yara/yara2
|
||||
./configure --prefix=/usr
|
||||
${MAKE}
|
||||
${SUDO} ${MAKE} symstall
|
||||
)
|
||||
)
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user