Vincent Thiberville

Yara does not have unicode handling in strings, and the `\u` syntax does not exist. What you wrote is actually `[u8fd9]`, so one of those five ascii bytes. If you...

yara uses bindgen by default which requires clang to be installed yes: https://rust-lang.github.io/rust-bindgen/requirements.html#clang

@HydraDragonAntivirus You probably don't have yara installed and need to use the vendored feature. See https://github.com/Hugal31/yara-rust/issues/121#issuecomment-1686212326

Looks like the macos-latest runner was updated from 12.7 to 14.4 and it no longer works well, i don't think it's related to my changes

Not sure why it worked before and suddently didn't work, but I think adding YARA_OPENSSL_DIR instead of OPENSSL_DIR should solve the issue. I had the same issue on updating to...

AFAICT There is an issue in the windows support, the bias is returned as `module_base()` and not as `module_base() - ImageBase`. So it looks like i forgot to apply this...