mirror of
https://github.com/mandiant/capa.git
synced 2025-12-12 15:49:46 -08:00
ghidra: fix IndexError exception (#1879)
* ghidra: fix IndexError exception
This commit is contained in:
@@ -61,7 +61,22 @@ var_names = ["".join(letters) for letters in itertools.product(string.ascii_lowe
|
||||
|
||||
|
||||
# this have to be the internal names used by capa.py which are sometimes different to the ones written out in the rules, e.g. "2 or more" is "Some", count is Range
|
||||
unsupported = ["characteristic", "mnemonic", "offset", "subscope", "Range", "os", "property", "format", "class", "operand[0].number", "operand[1].number", "substring", "arch", "namespace"]
|
||||
unsupported = [
|
||||
"characteristic",
|
||||
"mnemonic",
|
||||
"offset",
|
||||
"subscope",
|
||||
"Range",
|
||||
"os",
|
||||
"property",
|
||||
"format",
|
||||
"class",
|
||||
"operand[0].number",
|
||||
"operand[1].number",
|
||||
"substring",
|
||||
"arch",
|
||||
"namespace",
|
||||
]
|
||||
# further idea: shorten this list, possible stuff:
|
||||
# - 2 or more strings: e.g.
|
||||
# -- https://github.com/mandiant/capa-rules/blob/master/collection/file-managers/gather-direct-ftp-information.yml
|
||||
|
||||
Reference in New Issue
Block a user