VirusTotal/yara
1
0
Fork 0
mirror of https://github.com/VirusTotal/yara.git synced 2026-10-11 22:49:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Test

Browse Source
This commit is contained in:
Victor M. Alvarez
2026-06-02 11:12:29 +02:00
parent f4c84aa68d
commit a78e34bc59
1 changed files with 0 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test-magic.c
-37
View File
@@ -21,43 +21,6 @@ int main(int argc, char** argv)
magic.type() contains \"ELF\" }",
ELF32_FILE);
/*assert_true_rule_blob(
"import \"magic\" rule test { condition: \
( magic.type() contains \"MS-DOS\" or \
magic.type() contains \"PE32\" ) }",
PE32_FILE);*/
assert_true_rule_blob(
"import \"magic\" rule test { condition: \
( magic.mime_type() == \"application/x-dosexec\" or \
magic.mime_type() == \"application/vnd.microsoft.portable-executable\" ) }",
PE32_FILE);
assert_true_rule_blob(
"import \"magic\" rule test { condition: \
( magic.type() contains \"MS-DOS executable\" or \
magic.type() contains \"PE32+ executable\" or \
magic.type() contains \"PE32 executable\" ) }",
PE32_FILE);
assert_true_rule_blob(
"import \"magic\" rule test { condition: \
( magic.type() contains \"MS-DOS executable\" or \
magic.type() contains \"PE32+ executable\" or \
magic.type() contains \"PE32 executable\") and \
( magic.mime_type() == \"application/x-dosexec\" or \
magic.mime_type() == \"application/vnd.microsoft.portable-executable\" ) }",
PE32_FILE);
assert_true_rule_blob(
"import \"magic\" rule test { condition: \
( magic.type() contains \"MS-DOS executable\" or \
magic.type() contains \"PE32+ executable\" or \
magic.type() contains \"PE32 executable\") and \
( magic.mime_type() == \"application/x-dosexec\" or \
magic.mime_type() == \"application/vnd.microsoft.portable-executable\" ) }",
PE32_FILE);
// Test case for https://github.com/VirusTotal/yara/issues/1663
assert_true_rule_blob(
"import \"magic\" rule test { condition: \