Wesley Shields

RFC: Composable Modifiers

3

I've been thinking of ways to make modifiers better. I wrote up some notes on how I think this can be done and would love some discussion (especially if @plusvic...

Support xor_value in returned strings.

5

Extend the tuple that represents an instance of a match to include the xor key. This breaks all existing scripts that are unpacking the tuple, which I'm not very happy...

Add a -M option to the cli which will print the module names to stdout. As the number of modules has grown it can become confusing to know what modules...

Add math.length()

4

Add a math.length() which will return the length of the sequence of bytes, including any NULL bytes. Fixes #1778.

Implement bytes keyword.

1

This commit adds the "bytes" keyword to the language. It can be used to read arbitrary sequences of bytes similar to the int8 family of keywords. The major difference here...

Debug information is actually stored as an array of debug entries. Historically YARA has only parsed the first available PDB path from this array. However, different debug entries can have...

Warn on always false integer reads and comparisons.

1

When reading an integer of a specific size and comparing it to an integer of a larger size where any of the upper bits are set we will now emit...

I've done some minor work to get libuinet to build under OS X again. It's not complete and I'm not particularly happy with how I turned off netmap, but libuinet...

Someone(TM) recently sent me this paper: http://theory.stanford.edu/~aiken/publications/papers/sigmod03.pdf It might be useful to read it and see if there are any techniques we can leverage in snugglefish.

feat: Implement toml config for fmt command.

3

This implements a config option which can be used to set options for "yr fmt". An example config file is included as "wxsfmt.toml" which currently has everything disabled just to...