gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-01-03 16:27:58 -08:00
Code Issues Packages Projects Releases Wiki Activity

render: translate match nodes from features to statements

Browse Source
This commit is contained in:
William Ballenthin
2020-06-28 01:27:30 -06:00
parent 58f3d105c2
commit 70c590dfc6
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
capa/render/__init__.py
View File

@@ -54,7 +54,7 @@ def convert_statement_to_result_document(statement):
elif isinstance(statement, capa.engine.Subscope):
return {
'type': 'subscope',
'scope': statement.scope,
'subscope': statement.scope,
}
else:
raise RuntimeError("unexpected match statement type: " + str(statement))
@@ -176,12 +176,17 @@ def convert_match_to_result_document(rules, capabilities, result):
rule_matches = {address: result for (address, result) in capabilities[rule_name]}
if rule.meta.get('capa/subscope-rule'):
# for a subscope rule, rename the rule name to the scope,
# which is consistent with the rule text.
# for a subscope rule, fixup the node to be a scope node, rather than a match feature node.
#
# e.g. `contain loop/30c4c78e29bf4d54894fc74f664c62e8` -> `basic block`
scope = rule.meta['scope']
doc['node']['feature']['match'] = scope
doc['node'] = {
'type': 'statement',
'statement': {
'type': 'subscope',
'subscope': scope,
},
}
for location in doc['locations']:
doc['children'].append(convert_match_to_result_document(rules, capabilities, rule_matches[location]))