Skip to content

Releases: VirusTotal/yara-x

v1.14.0

06 Mar 10:19
6a7982f

Choose a tag to compare

  • Multiple improvements in language server (#559, #560, #561, #564, #568, #579).
  • Added deps command to the CLI tool that shows rule dependencies (#498).
  • Improve macho module by parsing DYLD_CHAINED_IMPORT_ADDEND64 fixup format (#554).
  • Some optimizations in WASM code generation (#563, #565).
  • BUGFIX: avoid showing UNC paths in Windows (#579).
  • BUGFIX: return error when define_global receives a structure with some key that is not a valid identifier (946665d)

Contributors: @PeterMatula @wxsBSD @prosperritty

v1.13.0

06 Feb 17:41
d397e8c

Choose a tag to compare

  • Add crx and dex modules to Python invoke API (#534).
  • Add Python API for specifying the metadata that should be passed to modules (6bebe34):
  • Output filenames that needs reformatting when using yr fmt --check (#538)
  • Improve code completion suggestions in language server.
  • BUGFIX: issue while parsing imports in macho module (#544).
  • BUGFIX: preserve duplicate metadata entries when using -output-format=json (#550).
  • BUGFIX: logic error causing a use-after-free in the block scanning API (0d1763e).
  • BUGFIX: panic when an error occurs at the end of a source file, but the last character is a multi-byte UTF-8 character (56bff8a).

Contributors: @dguido @wxsBSD @PeterMatula @latonis

v1.12.0

26 Jan 11:28
466a624

Choose a tag to compare

  • Improvements in the parser to produce better Concrete Syntax Trees (#531, c46b3bd).
  • BUGFIX: avoid panic when parsing some regular expressions (136ab9f).

v1.11.0

09 Jan 12:35
3fe7b38

Choose a tag to compare

  • Make the parser stricter (#502).
  • Implement dex module (#458).
  • Implement C api console log (#515).
  • Implement permhash for the crx module (#510).
  • Implement the imports() method for the Rules object in the Python API (fd17833).
  • Implement parsing for LC_LAZY_LOAD_DYLIB and LC_LOAD_UPWARD_DYLIB in macho module (#518).
  • Raise warning when a global rule is used in a condition (a429c98).
  • Raise warnings when the result of multiple hash functions is compared to strings that can't match the hash (74c005c).
  • BUGFIX: properly parse dylib trie in macho module (#517).
  • BUGFIX: panic when comparing two booleans with == (3fe7b38).
  • BUGFIX: panic when an invalid escape sequence is found in some unicode strings (d12ca9e).
  • BUGFIX: issues in the parser (ae9be7d, 4e1a74e).
  • BUGFIX: don't acquire the GIL in the Python module during scan operations (4f38eda)

Contributors: @delvinru @latonis @wxsBSD

v1.10.0

20 Nov 11:25
04817dd

Choose a tag to compare

  • New yr fix warnings command (#493).
  • Generate more efficient WASM code for some expressions, reducing the size of compiled rules (5efc214, a865681).
  • Improve the API for traversing the AST in DFS order (8443106, 2b67943).
  • Raise invariant_expr warning in some for loops that can't be true (#499).

Contributors: @wxsBSD @egibs

v1.9.0

03 Nov 12:10
01ef5e2

Choose a tag to compare

  • Add function for scanning files by path to the C and Go APIs (32bac10).
  • Add version number to the Rust API (bdb53e8, #469).
  • Add osabi field to elf module (afa0960).
  • Avoid verifying patterns when the file size is not in the range specified in the rule condition (#473).
  • Avoid emitting code that invokes search_for_patterns if not necessary (#487).
  • Implement DFS iterator for expressions in AST (#488).
  • BUGFIX: Check if AddressOfFunctions is zero while parsing PE files (#482).

Contributors: @vojone

v1.8.1

07 Oct 15:09
c2a09cc

Choose a tag to compare

  • BUGFIX: don't mangle the C API function yrx_finalize and include it in the header files (#467).
  • BUGFIX: fix some issues and edge cases in block scanning (d7873db).

Contributors: @metthal

v1.8.0

06 Oct 10:19
dcde4cb

Choose a tag to compare

  • Implement block scanning API for Rust and C (#459, 185c2ee).
  • Implement Golang and C APIs for setting global variables of type array and structure (#449).
  • Add iterator for Rules object in Python (#463).
  • BUGFIX: Inconsistency with legacy YARA in PE certificate subjects (445e7e4).

Contributors: @nmbarel

v1.7.1

19 Sep 10:58
340f573

Choose a tag to compare

  • BUGFIX: fix compilation in 32-bits platforms (#453).

v1.7.0

17 Sep 10:51
a01b1be

Choose a tag to compare

  • New warning suggesting the use of none of them instead of 0 of them.
  • Added option --max-matches-per-pattern to the CLI and the max_matches_per_pattern method to the Python API (#437).
  • New yrx_finalize function to the C API that allows dynamically unloading the YARA-X library (#445).
  • Add yrx_compiler_add_include_dir function to the C API (#447).
  • Replace the Formatter::ident_spaces method with Formatter::indentation (b8a1808).
  • BUGFIX: Indentation issues in code formatter (6bfe2e2).
  • BUGFIX: Inconsistencies in code formatter with empty lines at the end of the code (de10bbd).
  • BUGFIX: High memory consumption while parsing some PE files (af18dbc, #443)
  • BUGFIX: Prevent panic when assertions like \b and \B are used in Unicode regexps (0536ad1).

Contributors: @1ndahous3 @jtpox @vojone