{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":7037996,"defaultBranch":"master","name":"yara","ownerLogin":"VirusTotal","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2012-12-06T15:33:08.000Z","ownerAvatar":"https://github.com/avatars/u/7701252?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1718788388.0","currentOid":""},"activityList":{"items":[{"before":"8616165472424d9949c434a5da26858e7880affb","after":"6fe197e1bca069d1e79c68fecc46619e788829e6","ref":"refs/heads/master","pushedAt":"2024-06-21T14:25:53.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Fix null pointer dereference introduced in 8616165.\n\nSee: https://oss-fuzz.com/testcase?key=5726747190951936","shortMessageHtmlLink":"Fix null pointer dereference introduced in 8616165."}},{"before":"608fb3da466daa903266cae66f0eb5f6d1ada963","after":"8616165472424d9949c434a5da26858e7880affb","ref":"refs/heads/master","pushedAt":"2024-06-19T11:48:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Fix segfault with regular expressions that matched the zero-length string.\n\nIn regular expressions, repetition operators`{0,0}` and `{,0}` are valid, but they always match the zero-length string. For instance, `a{0,0}` and `[a-z]{0,0}` both match the zero-length string.\n\nWhen the whole regular expression consists in one of these repetitions it caused a segfault during the evaluation of the regular expression because the `forward_code_ref` field for the root atom in the atom's tree was null.\n\nCloses #2084.","shortMessageHtmlLink":"Fix segfault with regular expressions that matched the zero-length st…"}},{"before":"4fc1ff822c11988ef616882a1a32e787359fdef4","after":"608fb3da466daa903266cae66f0eb5f6d1ada963","ref":"refs/heads/master","pushedAt":"2024-06-19T09:47:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Increase the limit for the maximum number of rows in `dotnet` module.\n\nSee:\nhttps://github.com/VirusTotal/yara-x/issues/138\nhttps://github.com/VirusTotal/yara-x/commit/2f410f7dc26f9ff8fcf3847dc143e07126b90a87","shortMessageHtmlLink":"Increase the limit for the maximum number of rows in dotnet module."}},{"before":"2cd11a49b14d4ec23494418cdaae85885bb250be","after":"eec5d27f8c3fced0d6ef1c9bade48a1a1549c754","ref":"refs/heads/max_path","pushedAt":"2024-06-19T09:22:26.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Fix wrong identifier","shortMessageHtmlLink":"Fix wrong identifier"}},{"before":"93ad730eed6a80079146264a7a1f1b5a70d31351","after":"2cd11a49b14d4ec23494418cdaae85885bb250be","ref":"refs/heads/max_path","pushedAt":"2024-06-19T09:17:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Add missing include.","shortMessageHtmlLink":"Add missing include."}},{"before":null,"after":"93ad730eed6a80079146264a7a1f1b5a70d31351","ref":"refs/heads/max_path","pushedAt":"2024-06-19T09:13:08.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Replace all instances of `MAX_PATH` with `YR_MAX_PATH`.","shortMessageHtmlLink":"Replace all instances of MAX_PATH with YR_MAX_PATH."}},{"before":"3f5b4c73d942ed88165647aaa97658d43098de8a","after":"4fc1ff822c11988ef616882a1a32e787359fdef4","ref":"refs/heads/master","pushedAt":"2024-05-31T14:30:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Recover from syntax error at the end of an included file\n\nWhen an included file contains an error that makes the parsing fail, the compiler must pop the file name from the stack before continuing parsing the original file, otherwise it will cause the confusing errors described in https://github.com/VirusTotal/yara-python/issues/260","shortMessageHtmlLink":"Recover from syntax error at the end of an included file"}},{"before":"0e5b6bb9660cba500eb58dbccb027757c82cc4cf","after":"3f5b4c73d942ed88165647aaa97658d43098de8a","ref":"refs/heads/master","pushedAt":"2024-05-29T10:15:52.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Limit resource names to 1000 character at most.\n\nFixes high memory usage with corrupt files like bd15a7227770d89546e0a16e4c8da45937d970baa810827a7ceb17abd3138fec.","shortMessageHtmlLink":"Limit resource names to 1000 character at most."}},{"before":"e453eb1314e5e5c77d470840717d62e1f668f413","after":"0e5b6bb9660cba500eb58dbccb027757c82cc4cf","ref":"refs/heads/master","pushedAt":"2024-05-25T10:23:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Bump version to 4.5.1","shortMessageHtmlLink":"Bump version to 4.5.1"}},{"before":"8a0c19d6f5fa869dddb06ae183a40d38c98d108e","after":"e453eb1314e5e5c77d470840717d62e1f668f413","ref":"refs/heads/master","pushedAt":"2024-05-24T12:03:49.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Fix infinite loop with certain corrupt files.","shortMessageHtmlLink":"Fix infinite loop with certain corrupt files."}},{"before":"46ae34868713bd5f41b2eea80e25314970a40f40","after":"8a0c19d6f5fa869dddb06ae183a40d38c98d108e","ref":"refs/heads/master","pushedAt":"2024-05-23T11:44:37.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Remove `printf`","shortMessageHtmlLink":"Remove printf"}},{"before":"f1640e24ec55b8e7529c5a64dbe4f147ca3bf829","after":"46ae34868713bd5f41b2eea80e25314970a40f40","ref":"refs/heads/master","pushedAt":"2024-05-23T11:44:02.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Remove `printf`.","shortMessageHtmlLink":"Remove printf."}},{"before":"5f2a2213ac542f25de6ae89154316d97c202abf0","after":"f1640e24ec55b8e7529c5a64dbe4f147ca3bf829","ref":"refs/heads/master","pushedAt":"2024-05-22T13:51:50.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Allow spaces in regexp repetition operators.\n\nFor instance, `x{n, m}`, `x{n ,m}` and `x{n , m}` are all equivalent to `x{n,m}`. This is done for compatibility with YARA-X, but I've seen real-life regular expressions in that contain such spaces, for example:\n\n```\n/C:\\\\Users\\\\qqq\\\\.{30, 50}\\.pdb/\n```","shortMessageHtmlLink":"Allow spaces in regexp repetition operators."}},{"before":"7cf3d2fefaeb9784c7615b7c53a670e67feae7de","after":"5f2a2213ac542f25de6ae89154316d97c202abf0","ref":"refs/heads/master","pushedAt":"2024-05-18T10:07:23.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Attempt to fix docs adding --strict-escape to CLI help and main yara docs (#2077)","shortMessageHtmlLink":"Attempt to fix docs adding --strict-escape to CLI help and main yara …"}},{"before":"dec221d7e8eef209b40bc1547614dd5aef2e769f","after":"7cf3d2fefaeb9784c7615b7c53a670e67feae7de","ref":"refs/heads/master","pushedAt":"2024-05-18T10:04:32.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Modifying yara-python docs to reflect existence of strict_escape bool (#2079)","shortMessageHtmlLink":"Modifying yara-python docs to reflect existence of strict_escape bool ("}},{"before":"375aa7aa8fb595a1821b69eaaf69ed7b66a69340","after":"dec221d7e8eef209b40bc1547614dd5aef2e769f","ref":"refs/heads/master","pushedAt":"2024-05-17T15:30:16.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Add Verisys to list of users (#2078)","shortMessageHtmlLink":"Add Verisys to list of users (#2078)"}},{"before":"f0cf225538f0d5dfcc932c1e75c91b4fcc53dacf","after":"375aa7aa8fb595a1821b69eaaf69ed7b66a69340","ref":"refs/heads/master","pushedAt":"2024-05-17T15:27:26.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Add UpSight Security Inc. to list of users (#2080)","shortMessageHtmlLink":"Add UpSight Security Inc. to list of users (#2080)"}},{"before":"85019629199060dcc0992e10505914b1420760a7","after":"f0cf225538f0d5dfcc932c1e75c91b4fcc53dacf","ref":"refs/heads/master","pushedAt":"2024-05-07T11:06:17.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Fix issue introduced in 8501962.\n\n`authenticode->verify_flags` are not really bit flags, they are more like error codes.","shortMessageHtmlLink":"Fix issue introduced in 8501962."}},{"before":"2479a7104ece35916aa49869a5cdd90e78994340","after":"85019629199060dcc0992e10505914b1420760a7","ref":"refs/heads/master","pushedAt":"2024-05-06T08:46:53.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Ignore Authenticode signatures that are somehow corrupt.","shortMessageHtmlLink":"Ignore Authenticode signatures that are somehow corrupt."}},{"before":"48502da720de879d1de11ae952410f845994d0a8","after":null,"ref":"refs/heads/ci","pushedAt":"2024-05-02T08:43:27.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"}},{"before":"41aa1e7ccce34dd4bd5465b0c70c602e2ca76df5","after":"2479a7104ece35916aa49869a5cdd90e78994340","ref":"refs/heads/master","pushedAt":"2024-05-02T08:39:50.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"fix several bugs in array type handling in dotnet module (#2064)\n\nSeveral bugs were present in the parsing and generation of a string to\r\nrepresent an array type, notably when the \"lo_bound\" value is set.\r\n\r\n- The \"read_blob_signed\" was buggy for values outside the\r\n [-2**6, 2**6-1], the sign edition did not use the right bitmask,\r\n and the type used was unsigned.\r\n\r\n- The display when lo_bound != 0 was buggy:\r\n\r\n - size=5, lobound=0 => should be `5`, this was ok\r\n - size=5, lobound=1 => should be `1...5`, this was buggy and displayed\r\n `1...6`. The \"range format\" is inclusive.\r\n\r\n- 0 should still be displayed if size is 0. Only when size is unset\r\n should it be left out. So an array declared as `[5,0,3]` should be\r\n displayed the same way, and not as `[5,,3]`.","shortMessageHtmlLink":"fix several bugs in array type handling in dotnet module (#2064)"}},{"before":"3c93989a5d594adb0c9c7f69272ba9c730aab8a1","after":"41aa1e7ccce34dd4bd5465b0c70c602e2ca76df5","ref":"refs/heads/master","pushedAt":"2024-05-02T08:38:17.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Fix dex module inconsistencies (#2069)\n\n* fix signature and magic strings in dex module\r\n\r\nSeveral bytestring values in the dex module were not set properly,\r\nand were cut short due to the presence of a nul byte.\r\n\r\nThis happened on:\r\n- all the dex.DEX_FILE_MAGIC_* constants, which were cut short by one\r\n byte (the last one is the nul byte).\r\n- the magic and signature field in the \"header\" object of the module.\r\n\r\nFor all of those, the size is fixed and known, so use the right length\r\nand do not cut it short if a nul byte is present.\r\n\r\n* fix declared fields in the dex module\r\n\r\nThere was some mismatch between the declared fields and the ones filled\r\nby the module:\r\n\r\n- `dex.field[*].static` and `dex.field[*].instance` were defined, but\r\n not declared, making their use impossible. They are now properly\r\n declared.\r\n\r\n- several fields in `dex.method[*].code_item` were declared but never\r\n defined: `padding`, `tries` and `handlers`. Those are removed since\r\n they couldn't have been used.","shortMessageHtmlLink":"Fix dex module inconsistencies (#2069)"}},{"before":"4b9b4c0bdb3d18f9a82e8b9ab19e73a6d7a69e00","after":"3c93989a5d594adb0c9c7f69272ba9c730aab8a1","ref":"refs/heads/master","pushedAt":"2024-04-30T17:16:22.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Try using a specific MacOS version for fixing issue in CI (#2073)\n\nFor some reason the jansson library is not being found in the latest MacOS version, even though brew seems to be installing it.","shortMessageHtmlLink":"Try using a specific MacOS version for fixing issue in CI (#2073)"}},{"before":null,"after":"48502da720de879d1de11ae952410f845994d0a8","ref":"refs/heads/ci","pushedAt":"2024-04-30T15:36:17.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Try using a specific MacOS version for fixing issue in CI","shortMessageHtmlLink":"Try using a specific MacOS version for fixing issue in CI"}},{"before":"adf3ddeaeebd41d66da09c7ddcb9866ab665276f","after":"4b9b4c0bdb3d18f9a82e8b9ab19e73a6d7a69e00","ref":"refs/heads/master","pushedAt":"2024-04-30T09:42:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Add sanity check that prevents OOM errors.\n\nThe `pe_parse_delayed_imports` function didn't take into account that `pe_rva_to_offset` could return -1 when the RVA can't be translated into a file offset.","shortMessageHtmlLink":"Add sanity check that prevents OOM errors."}},{"before":"1be9811ad91c8d2113130e7274bd532a9c784c81","after":"adf3ddeaeebd41d66da09c7ddcb9866ab665276f","ref":"refs/heads/master","pushedAt":"2024-04-30T06:50:06.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Updated writingmodules.rst - replaced fetch_data by the new func (#2071)","shortMessageHtmlLink":"Updated writingmodules.rst - replaced fetch_data by the new func (#2071)"}},{"before":"1242223b04f28ec88629ab1d0b2c18d0aeec16a8","after":"1be9811ad91c8d2113130e7274bd532a9c784c81","ref":"refs/heads/master","pushedAt":"2024-04-23T07:20:02.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Add sanity check that prevents to much memory consumption with corrupted files\n\nWith this change ordinal numbers in imports are limited to 65535, larger ordinal numbers are ignored because they are sign of file corruption.","shortMessageHtmlLink":"Add sanity check that prevents to much memory consumption with corrup…"}},{"before":"5317a2b3499f1e3a583377dcc1b8be84725034ac","after":"1242223b04f28ec88629ab1d0b2c18d0aeec16a8","ref":"refs/heads/master","pushedAt":"2024-04-19T15:21:53.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Ignore resource directory entries that with offset == 0.","shortMessageHtmlLink":"Ignore resource directory entries that with offset == 0."}},{"before":"620963092c42b95da9fa124727f25455e0beae5d","after":"5317a2b3499f1e3a583377dcc1b8be84725034ac","ref":"refs/heads/master","pushedAt":"2024-04-08T13:49:14.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Fix endianness issue.","shortMessageHtmlLink":"Fix endianness issue."}},{"before":"80972f0b4c9939ddbf83d3c1b4cbd218d6b389d1","after":"620963092c42b95da9fa124727f25455e0beae5d","ref":"refs/heads/master","pushedAt":"2024-04-08T13:33:41.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"plusvic","name":"Victor M. Alvarez","path":"/plusvic","primaryAvatarUrl":"https://github.com/avatars/u/182937?s=80&v=4"},"commit":{"message":"Better sanitation while parsing corrupted resources.","shortMessageHtmlLink":"Better sanitation while parsing corrupted resources."}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEa64R1wA","startCursor":null,"endCursor":null}},"title":"Activity · VirusTotal/yara"}