gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-12 23:59:48 -08:00
Code Issues Packages Projects Releases Wiki Activity

vmray: improve models.py comments

Browse Source
This commit is contained in:
Mike Hunhoff
2024-07-23 09:48:52 -06:00
parent 3b94961133
commit 46b68d11b7
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
capa/features/extractors/vmray/models.py
View File

@@ -106,13 +106,15 @@ class Params(BaseModel):
def validate_call_name(value: str) -> str:
if value.startswith("sys_"):
# VMRay appears to log kernel function calls ("sys_*") so we remove that
# here to enable capa matching
return value[4:]
else:
return value
# call names may contain uneeded data so we remove that data before
# the inner validation (str) is called
# function call names may need to be reformatted to remove data, etc. so we reformat
# before calling the inner validation (str)
CallName = Annotated[str, BeforeValidator(validate_call_name)]