Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue with Integer Range in YARA-X Rule Compilation #238

Closed
Jamba777 opened this issue Nov 6, 2024 · 1 comment
Closed

Issue with Integer Range in YARA-X Rule Compilation #238

Jamba777 opened this issue Nov 6, 2024 · 1 comment

Comments

@Jamba777
Copy link

Jamba777 commented Nov 6, 2024

Hello, everyone,

I'm encountering an issue when trying to add a YARA rule to the compiler. The rule works fine in the standard YARA implementation but fails in YARA-X with the following error:
error[E027]: invalid integer --> line:2620:230 | 2620 | ...3bf0300488b4424104889442430488b4c24[66232-66345]5953feff488b44247048890424c644240800e8a6d5ffff0fb644241048894424[25897-25993]8b... | ^^^^^ this number is out of the valid range: [0, 65535]

It seems the integer range [66232-66345] exceeds the valid range [0, 65535] in YARA-X.

In the standard YARA, this rule compiles without any issues.

My question is:
Can I rewrite the out-of-range part [66232-66345] as something like [65535][697-810] or some equivalent workaround?

Thank you in advance for your help!

@fivlao
Copy link

fivlao commented Nov 6, 2024

Hi,

Are you planning to add support for ranges more than 65535?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants