Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: skip bytecode evaluation for some rules without string matches #1927

Merged
merged 3 commits into from
Jun 30, 2023
Merged

feat: skip bytecode evaluation for some rules without string matches #1927

merged 3 commits into from
Jun 30, 2023

Commits on Jun 13, 2023

  1. feat: skip bytecode evaluation for some rules without string matches 

    Optimize a common case where YARA conditions are formed like e.g.
"... and 1 of them and ...", in other words, requiring a string
match to ever be true.
By noting these cases and recording in a bitmap if a string match
occurred, the condition evaluation for these rules can be skipped
entirely in most cases.
    @secDre4mer
    secDre4mer committed Jun 13, 2023
    Configuration menu
    Copy the full SHA
    fdcc72f View commit details
    Browse the repository at this point in the history

Commits on Jun 16, 2023

  1. feat: only initialize bitmap once at rules load time

    @secDre4mer
    secDre4mer committed Jun 16, 2023
    Configuration menu
    Copy the full SHA
    12eb727 View commit details
    Browse the repository at this point in the history

  2. fix: handle calloc fail

    @secDre4mer
    secDre4mer committed Jun 16, 2023
    Configuration menu
    Copy the full SHA
    dfa5ae0 View commit details
    Browse the repository at this point in the history