No data matches & warnings support

master
Matt 2019-01-08 23:26:14 +00:00
parent df8abb099c
commit 4c1521a98e
1 changed files with 15 additions and 6 deletions

View File

@ -40,17 +40,24 @@ class YaraRules extends Operation {
run(input, args) { run(input, args) {
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
Yara().then(yara => { Yara().then(yara => {
let matchString = "";
const resp = yara.run(input, args[0]); const resp = yara.run(input, args[0]);
if (resp.compileErrors.size() > 0) { if (resp.compileErrors.size() > 0) {
for (let i = 0; i < resp.compileErrors.size(); i++) { for (let i = 0; i < resp.compileErrors.size(); i++) {
const compileError = resp.compileErrors.get(i); const compileError = resp.compileErrors.get(i);
if (!compileError.warning) {
reject(new OperationError(`Error on line ${compileError.lineNumber}: ${compileError.message}`)); reject(new OperationError(`Error on line ${compileError.lineNumber}: ${compileError.message}`));
} else {
matchString += `Warning on line ${compileError.lineNumber}: ${compileError.message}`;
}
} }
} }
const matchedRules = resp.matchedRules; const matchedRules = resp.matchedRules;
let matchString = "";
for (let i = 0; i < matchedRules.keys().size(); i++) { for (let i = 0; i < matchedRules.keys().size(); i++) {
const ruleMatches = matchedRules.get(matchedRules.keys().get(i)); const ruleMatches = matchedRules.get(matchedRules.keys().get(i));
if (ruleMatches.size() === 0) {
matchString += `Input matches rule "${matchedRules.keys().get(i)}".\n`;
} else {
matchString += `Rule "${matchedRules.keys().get(i)}" matches:\n`; matchString += `Rule "${matchedRules.keys().get(i)}" matches:\n`;
for (let j = 0; j < ruleMatches.size(); j++) { for (let j = 0; j < ruleMatches.size(); j++) {
@ -58,6 +65,8 @@ class YaraRules extends Operation {
matchString += `Position ${match.location}, length ${match.matchLength}, data: ${match.data}\n`; matchString += `Position ${match.location}, length ${match.matchLength}, data: ${match.data}\n`;
} }
} }
}
resolve(matchString); resolve(matchString);
}); });
}); });