VirusTotal/yara
1
0
Fork 0
mirror of https://github.com/VirusTotal/yara.git synced 2026-10-11 22:49:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Minor style fixes.

Browse Source
This commit is contained in:
Victor M. Alvarez
2024-01-15 13:07:34 +01:00
parent 53c83c8dca
commit a3d938b429
1 changed files with 49 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test-rules.c
+49 -29
View File
@@ -520,7 +520,8 @@ static void test_syntax()
// Any unreferenced string must be searched for anywhere.
assert_string_capture(
"rule test { strings: $a = \"AXS\" $_b = \"ERS\" condition: $a }",
"AXSERS", "ERS");
"AXSERS",
"ERS");
YR_DEBUG_FPRINTF(1, stderr, "} // %s()\n", __FUNCTION__);
}
@@ -2439,14 +2440,12 @@ void test_re()
TEXT_1024_BYTES "abc");
assert_true_rule_blob(
"rule test { condition: \"avb\" matches /a\\vb/ }",
TEXT_1024_BYTES "rule test { condition: \"avb\" matches /a\\vb/ }"
)
"rule test { condition: \"avb\" matches /a\\vb/ }",
TEXT_1024_BYTES "rule test { condition: \"avb\" matches /a\\vb/ }");
assert_false_rule_blob(
"rule test { condition: \"ab\" matches /a\\vb/ }",
TEXT_1024_BYTES "rule test { condition: \"ab\" matches /a\\vb/ }"
)
assert_false_rule_blob(
"rule test { condition: \"ab\" matches /a\\vb/ }",
TEXT_1024_BYTES "rule test { condition: \"ab\" matches /a\\vb/ }");
assert_regexp_syntax_error(")");
assert_true_regexp("abc", "abc", "abc");
@@ -2622,7 +2621,7 @@ void test_re()
assert_false_regexp("[\\x00-\\x02]+", "\x03\x04\x05");
assert_true_regexp("[\\x5D]", "]", "]");
assert_true_regexp("[\\x5A-\\x5D]", "\x5B", "\x5B");
assert_false_regexp("[\\x5A-\\x5D]", "\x4F")
assert_false_regexp("[\\x5A-\\x5D]", "\x4F");
assert_true_regexp("[\\x5D-\\x5F]", "\x5E", "\x5E");
assert_true_regexp("[\\x5C-\\x5F]", "\x5E", "\x5E");
assert_true_regexp("[\\x5D-\\x5F]", "\x5E", "\x5E");
@@ -3583,27 +3582,48 @@ void test_process_scan()
#endif
void test_invalid_escape_sequences_warnings()
{
YR_DEBUG_FPRINTF(1, stderr, "+ %s() {\n", __FUNCTION__);
{
YR_DEBUG_FPRINTF(1, stderr, "+ %s() {\n", __FUNCTION__);
assert_warning_strict_escape("rule test { strings: $a = /ab\\cdef/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = /ab\\ def/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = /ab\\;def/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /ab\\*def/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /abcdef/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = /ab\\cdef/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /abcdef/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = /\\\\WINDOWS\\\\system32\\\\\\victim\\.exe\\.exe/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /\\\\WINDOWS\\\\system32\\\\victim\\.exe\\.exe/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = /AppData\\\\Roaming\\\\[0-9]{9,12}\\VMwareCplLauncher\\.exe/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /AppData\\\\Roaming\\\\[0-9]{9,12}\\\\VMwareCplLauncher\\.exe/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = /ab[\\000-\\343]/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /ab[\\x00-\\x43]/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = /C:\\Users\\\\[^\\\\]+\\\\AppData\\\\Local\\\\AzireVPN\\\\token\\.txt/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /C:\\\\Users\\\\[^\\\\]+\\\\AppData\\\\Local\\\\AzireVPN\\\\token\\.txt/ condition: $a }");
assert_warning_strict_escape("rule test { condition: \"avb\" matches /a\\vb/ }");
YR_DEBUG_FPRINTF(1, stderr, "} // %s()\n", __FUNCTION__);
assert_warning_strict_escape(
"rule test { strings: $a = /ab\\cdef/ condition: $a }");
assert_warning_strict_escape(
"rule test { strings: $a = /ab\\ def/ condition: $a }");
assert_warning_strict_escape(
"rule test { strings: $a = /ab\\;def/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /ab\\*def/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /abcdef/ condition: $a }");
assert_warning_strict_escape(
"rule test { strings: $a = /ab\\cdef/ condition: $a }");
assert_no_warnings("rule test { strings: $a = /abcdef/ condition: $a }");
assert_warning_strict_escape(
"rule test { strings: $a = "
"/\\\\WINDOWS\\\\system32\\\\\\victim\\.exe\\.exe/ condition: $a }");
assert_no_warnings(
"rule test { strings: $a = "
"/\\\\WINDOWS\\\\system32\\\\victim\\.exe\\.exe/ condition: $a }");
assert_warning_strict_escape("rule test { strings: $a = "
"/AppData\\\\Roaming\\\\[0-9]{9,12}"
"\\VMwareCplLauncher\\.exe/ condition: $a }");
assert_no_warnings("rule test { strings: $a = "
"/AppData\\\\Roaming\\\\[0-9]{9,12}"
"\\\\VMwareCplLauncher\\.exe/ condition: $a }");
assert_warning_strict_escape(
"rule test { strings: $a = /ab[\\000-\\343]/ condition: $a }");
assert_no_warnings(
"rule test { strings: $a = /ab[\\x00-\\x43]/ condition: $a }");
assert_warning_strict_escape(
"rule test { strings: $a = "
"/C:\\Users\\\\[^\\\\]+\\\\AppData\\\\Local\\\\AzireVPN\\\\token\\.txt/ "
"condition: $a }");
assert_no_warnings(
"rule test { strings: $a = "
"/C:\\\\Users\\\\[^\\\\]+\\\\AppData\\\\Local\\\\AzireVPN\\\\token\\.txt/"
" condition: $a }");
assert_warning_strict_escape(
"rule test { condition: \"avb\" matches /a\\vb/ }");
YR_DEBUG_FPRINTF(1, stderr, "} // %s()\n", __FUNCTION__);
}
void test_performance_warnings()