diff --git a/host-interaction/log/debug/write-event/print-debug-messages.yml b/host-interaction/log/debug/write-event/print-debug-messages.yml index 43482573..ea7fc3c1 100644 --- a/host-interaction/log/debug/write-event/print-debug-messages.yml +++ b/host-interaction/log/debug/write-event/print-debug-messages.yml @@ -13,3 +13,6 @@ rule: - or: - api: DbgPrint - api: kernel32.OutputDebugString + - and: + - os: android + - api: __android_log_print diff --git a/lib/calculate-modulo-256-via-x86-assembly.yml b/lib/calculate-modulo-256-via-x86-assembly.yml index d089e144..2b8b5621 100644 --- a/lib/calculate-modulo-256-via-x86-assembly.yml +++ b/lib/calculate-modulo-256-via-x86-assembly.yml @@ -15,6 +15,9 @@ rule: # and ecx, 800000FFh # and ecx, 0FFh - and: + - or: + - arch: i386 + - arch: amd64 - mnemonic: and - or: - number: 0x800000FF diff --git a/nursery/delete-file-on-linux.yml b/nursery/delete-file-on-linux.yml new file mode 100644 index 00000000..40f321f7 --- /dev/null +++ b/nursery/delete-file-on-linux.yml @@ -0,0 +1,19 @@ +rule: + meta: + name: delete file on Linux + namespace: host-interaction/file-system/delete + authors: + - mehunhoff@google.com + scopes: + static: basic block + dynamic: call + mbc: + - File System::Delete File [C0047] + features: + - and: + - or: + - os: linux + - os: android + - or: + - api: unlink + - api: unlinkat