Releases: VirusTotal/yara-x
Releases · VirusTotal/yara-x
v1.14.0
- Multiple improvements in language server (#559, #560, #561, #564, #568, #579).
- Added
depscommand to the CLI tool that shows rule dependencies (#498). - Improve
machomodule by parsingDYLD_CHAINED_IMPORT_ADDEND64fixup format (#554). - Some optimizations in WASM code generation (#563, #565).
- BUGFIX: avoid showing UNC paths in Windows (#579).
- BUGFIX: return error when
define_globalreceives a structure with some key that is not a valid identifier (946665d)
Contributors: @PeterMatula @wxsBSD @prosperritty
v1.13.0
- Add
crxanddexmodules to Python invoke API (#534). - Add Python API for specifying the metadata that should be passed to modules (6bebe34):
- Output filenames that needs reformatting when using
yr fmt --check(#538) - Improve code completion suggestions in language server.
- BUGFIX: issue while parsing imports in
machomodule (#544). - BUGFIX: preserve duplicate metadata entries when using
-output-format=json(#550). - BUGFIX: logic error causing a use-after-free in the block scanning API (0d1763e).
- BUGFIX: panic when an error occurs at the end of a source file, but the last character is a multi-byte UTF-8 character (56bff8a).
Contributors: @dguido @wxsBSD @PeterMatula @latonis
v1.12.0
v1.11.0
- Make the parser stricter (#502).
- Implement
dexmodule (#458). - Implement C api console log (#515).
- Implement
permhashfor thecrxmodule (#510). - Implement the
imports()method for theRulesobject in the Python API (fd17833). - Implement parsing for
LC_LAZY_LOAD_DYLIBandLC_LOAD_UPWARD_DYLIBinmachomodule (#518). - Raise warning when a global rule is used in a condition (a429c98).
- Raise warnings when the result of multiple hash functions is compared to strings that can't match the hash (74c005c).
- BUGFIX: properly parse dylib trie in
machomodule (#517). - BUGFIX: panic when comparing two booleans with
==(3fe7b38). - BUGFIX: panic when an invalid escape sequence is found in some unicode strings (d12ca9e).
- BUGFIX: issues in the parser (ae9be7d, 4e1a74e).
- BUGFIX: don't acquire the GIL in the Python module during scan operations (4f38eda)
v1.10.0
v1.9.0
- Add function for scanning files by path to the C and Go APIs (32bac10).
- Add version number to the Rust API (bdb53e8, #469).
- Add
osabifield toelfmodule (afa0960). - Avoid verifying patterns when the file size is not in the range specified in the rule condition (#473).
- Avoid emitting code that invokes
search_for_patternsif not necessary (#487). - Implement DFS iterator for expressions in AST (#488).
- BUGFIX: Check if
AddressOfFunctionsis zero while parsing PE files (#482).
Contributors: @vojone
v1.8.1
v1.8.0
- Implement block scanning API for Rust and C (#459, 185c2ee).
- Implement Golang and C APIs for setting global variables of type array and structure (#449).
- Add iterator for
Rulesobject in Python (#463). - BUGFIX: Inconsistency with legacy YARA in PE certificate subjects (445e7e4).
Contributors: @nmbarel
v1.7.1
v1.7.0
- New warning suggesting the use of
none of theminstead of0 of them. - Added option
--max-matches-per-patternto the CLI and themax_matches_per_patternmethod to the Python API (#437). - New
yrx_finalizefunction to the C API that allows dynamically unloading the YARA-X library (#445). - Add
yrx_compiler_add_include_dirfunction to the C API (#447). - Replace the
Formatter::ident_spacesmethod withFormatter::indentation(b8a1808). - BUGFIX: Indentation issues in code formatter (6bfe2e2).
- BUGFIX: Inconsistencies in code formatter with empty lines at the end of the code (de10bbd).
- BUGFIX: High memory consumption while parsing some PE files (af18dbc, #443)
- BUGFIX: Prevent panic when assertions like
\band\Bare used in Unicode regexps (0536ad1).
Contributors: @1ndahous3 @jtpox @vojone