Victor M. Alvarez
Victor M. Alvarez
#1001 should solve this issue. @bnbdr, your feedback is welcomed.
@bnbdr would you mind reviewing https://github.com/VirusTotal/yara/pull/1061? The idea is storing the canary in a structure in the heap, instead of using a global variable, this way it should be harder...
I think it makes sense that iterators work on lists of strings too. It's more intuitive than a long sequence of `or` statements.
This is already implemented. It's disabled by default and should be enabled with `./configure --enable-profiling`. That will add a member `clock_ticks` to both `YR_RULE` and `YR_STRING` structures that can be...
This may happen because `pkg-config` is not installed, see: #1171
Maybe `make clean` would do the trick too, instead of having to delete the whole yara directory.
Maybe related to this: https://docs.microsoft.com/en-us/windows/desktop/api/winnt/ns-winnt-_large_integer#remarks Which compiler are you using? Are compiling for 32bits or 64bits?
@rspeaker, the issue you mentioned was fixed in https://github.com/VirusTotal/yara/commit/be3b77b633e2d1ab6fb3292044519e0b36ebaab1
From the message I assume that this it not the `yara` command-line tool, but some other program that have YARA built-in. It's hard to tell which is the root cause...
I think this is going to requiere some debugging on your side. Is hard to recommend an approach without knowing how you system works and how YARA was integrated into...