jmestwa-coder 605452e580 check stored digest length before comparing authenticode digests (#2234) ...

the digest carried in a signature can be shorter than the digest algorithm's output size, so the memcmp in parse_authenticode and pkcs9_countersig_new reads past the stored digest; compare the lengths first, the way countersignature.c already does at its other three digest compares.

2026-07-28 12:59:52 +02:00

..

include

Fix issue #796.

2017-11-21 19:33:57 +01:00

0ca09bde7602769120fadc4f7a4147347a7a97271370583586c9e587fd396171

Add dotnet tests. (#1109)

2019-08-12 09:07:58 +02:00

3b8b90159fa9b6048cc5410c5d53f116943564e4d05b04a843f9b3d0540d0c1c

Fix issue #1443. (#1445)

2021-02-08 22:04:52 +01:00

6c2abf4b80a87e63eee2996e5cea8f004d49ec0c1806080fa72e960529cba14c

Improve extraction of PDB path from PE files.

2023-11-09 09:31:47 +01:00

05cd06e6a202e12be22a02700ed6f1604e803ca8867277d852e8971efded0650

Return YR_UNDEFINED when offset is not valid (#1881)

2023-03-22 09:50:15 +01:00

33fc70f99be6d2833ae48852d611c8048d0c053ed0b2c626db4dbe902832a08b

Fix bug in while initializing the "guids" array in "dotnet" module. (#1166)

2019-11-14 19:04:18 +01:00

079a472d22290a94ebb212aa8015cdc8dd28a968c6b4d3b88acdd58ce2d3b885

Add thumbprint to pe.signatures[] (#897)

2018-07-25 20:28:40 +02:00

079a472d22290a94ebb212aa8015cdc8dd28a968c6b4d3b88acdd58ce2d3b885.upx

Fix regression in export parsing.

2020-05-01 09:45:26 +02:00

756684f4017ba7e931a26724ae61606b16b5f8cc84ed38a260a34e50c5016f59

Add parsing of .NET user types from .NET metadata stream (#1605)

2022-06-23 12:36:22 +02:00

authenticode_short_digest

check stored digest length before comparing authenticode digests (#2234)

2026-07-28 12:59:52 +02:00

bad_dotnet_pe

Fix issue #1708 (#1710)

2022-05-28 22:02:21 +02:00

base64

Document and test for known base64 false positives and false negatives

2020-04-23 12:46:35 +02:00

baz.yar

Fix issue 884 (#887)

2018-06-01 12:33:11 +02:00

c6f9709feccf42f2d9e22057182fe185f177fb9daaa2649b4669a24f2ee7e3ba_0h_410h

Collect some open PRs for inclusion for 4.3.0 (#1835)

2022-12-15 09:39:56 +01:00

ca21e1c32065352d352be6cde97f89c141d7737ea92434831f998080783d5386

test empty version_info value (#1548)

2021-08-25 09:47:25 +02:00

ChipTune.efi

Add support for PDB path in Apple EFI files (MTOC signature) (#1627)

2022-01-10 17:12:39 +01:00

dotnet_misaligned_guid

read dotnet and pe file fields through unaligned helpers (#2210)

2026-06-24 11:49:17 +02:00

e3d45a2865818756068757d7e319258fef40dad54532ee4355b86bc129f27345

Fix bug while calculating the imphash in PE files.

2023-11-17 11:37:35 +01:00

elf_with_imports

fix telfhash computation on x64 specific functions (#1847)

2023-01-10 09:50:00 +01:00

foo.yar

Fix issue #796.

2017-11-21 19:33:57 +01:00

mtxex_modified_rsrc_rva.dll

Add test for invalid rsrc rva.

2020-08-22 19:07:33 +02:00

mtxex.dll

Add tests and Fix incorrect return value in exports_index_regex.

2019-07-29 23:01:02 -04:00

pe_imports

Add imports_details and delayed_imports_details (#1523)

2021-08-20 09:42:57 +02:00

pe_mingw

Add parsing of '/N' section names (#1560)

2021-09-17 09:24:59 +02:00

test-pb.data

Add tests for a module automatically generated from a Protocol Buffer. (#1162)

2019-11-13 17:04:24 +01:00

test-pb.data.bin

Add tests for a module automatically generated from a Protocol Buffer. (#1162)

2019-11-13 17:04:24 +01:00

tiny

Remove files used for testing purposes that were being detected by antivirus programs. Remove .exe extension from some other files. (#512)

2016-09-06 22:20:27 +02:00

tiny_empty_import_name

Fix imphash issue with empty import names. (#1944)

2023-08-18 13:25:44 +02:00

tiny-idata-51ff

Remove files used for testing purposes that were being detected by antivirus programs. Remove .exe extension from some other files. (#512)

2016-09-06 22:20:27 +02:00

tiny-idata-5200

Remove files used for testing purposes that were being detected by antivirus programs. Remove .exe extension from some other files. (#512)

2016-09-06 22:20:27 +02:00

tiny-macho

Create test case for uninitialized number_of_segments

2020-05-11 09:02:06 +02:00

tiny-overlay

Add data file for test case

2017-05-25 11:35:10 +02:00

tiny-universal

Mach-O file format support (#617)

2017-11-21 13:03:22 +01:00

tiny.notes

Add test case for #429

2016-03-31 01:36:26 +02:00

undersized_rich

guard against undersized rich header in pe_parse_rich_signature (#2200)

2026-06-01 12:34:37 +02:00

weird_rich

Fix Rich header parsing. (#1164)

2019-11-15 10:56:07 +01:00

x.txt

Switch maximum string limit to warning. (#1350)

2020-12-17 10:10:27 +01:00

xor.out

Implement xor modifier. (#830)

2018-02-18 19:46:08 +01:00

xorwide.out

Implement xor modifier. (#830)

2018-02-18 19:46:08 +01:00

xorwideandascii.out

Fixes for xor modifier. (#1113)

2019-09-03 10:59:47 +02:00