mirror of
https://github.com/VirusTotal/yara.git
synced 2026-10-11 22:49:58 +00:00
As of file 5.44, some PE-related strings and MIME types have been
updated, causing the test to fail. This commit extends the fix in
0939464c35 to cover more cases.
closes #1853
See [Gentoo bug#889182](https://bugs.gentoo.org/889182)
This commit is contained in:
+2
-1
@@ -24,7 +24,8 @@ int main(int argc, char** argv)
|
||||
assert_true_rule_blob(
|
||||
"import \"magic\" rule test { condition: \
|
||||
( magic.type() contains \"MS-DOS executable\" or \
|
||||
magic.type() contains \"PE32+ executable\" ) and \
|
||||
magic.type() contains \"PE32+ executable\" or \
|
||||
magic.type() contains \"PE32 executable\") and \
|
||||
( magic.mime_type() == \"application/x-dosexec\" or \
|
||||
magic.mime_type() == \"application/vnd.microsoft.portable-executable\" ) }",
|
||||
PE32_FILE);
|
||||
|
||||
Reference in New Issue
Block a user