yara-x icon indicating copy to clipboard operation
yara-x copied to clipboard

feat: mach-o import parsing and import hash function

Open latonis opened this issue 1 year ago • 2 comments

Parsing imports for Mach-O as well as the accompanying import_hash() function.

latonis avatar May 30 '24 04:05 latonis

I need to refactor the sleb parsing to mirror the simplification done in https://github.com/VirusTotal/yara-x/commit/1bd014d8f8eaf9a628c4efccd0c7c57d795c69f4 to the uleb parser.

I think in the end, we likely want to keep imports and exports as UTF-8 strings as that is how it is defined in the docs.

latonis avatar Jun 23 '24 15:06 latonis

I will fix sleb to be panic free like uleb has been as well as merge conflicts. Will then fuzz for a while to ensure everything is good 🙏

latonis avatar Jun 28 '24 16:06 latonis