SecretScanner icon indicating copy to clipboard operation
SecretScanner copied to clipboard

Crashing after parsing yara rules

Open puzzle-it-nu opened this issue 4 months ago • 0 comments

I tried version 2.5.7 and it crashes after parsing the yara rules? but updating them doesn't have any effect. This is the error I got: WARN[2025-09-10T14:33:36Z] yara.go:91 YARA compiler warning in file ruleset: /home/deepfence/usr/secret.yar:29873 rule "PoetRat_Python": string "$grammer_massacre" may slow down scanning panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x20 pc=0xe43ac3]

goroutine 1 [running]: github.com/deepfence/YaraHunter/pkg/runner.runOnce({_, }, {{0x0, 0x0}, {0x11a15cc, 0x13}, {0x0, 0x0}, {0x0, 0x0}, ...}, ...) /home/deepfence/src/SecretScanner/vendor/github.com/deepfence/YaraHunter/pkg/runner/runner.go:129 +0x943 github.com/deepfence/YaraHunter/pkg/runner.StartYaraHunter[...]({, _}, {{0x0, 0x0}, {0x11a15cc, 0x13}, {0x0, 0x0}, {0x0, 0x0}, ...}, ...) /home/deepfence/src/SecretScanner/vendor/github.com/deepfence/YaraHunter/pkg/runner/runner.go:45 +0x308 main.main() /home/deepfence/src/SecretScanner/main.go:135 +0x7bd

Running it inside the container or as arguments to the container doesn't matter /home/deepfence/usr/SecretScanner -config-path /home/deepfence/usr/config.yaml -enable-updated false -local /opt/scan/remmina_log_file.log

puzzle-it-nu avatar Sep 10 '25 14:09 puzzle-it-nu