From 8f0eb5676e0f2c0c91caeff89fa7d5ce7c1d91b1 Mon Sep 17 00:00:00 2001 From: mr-tz Date: Tue, 28 Nov 2023 15:00:47 +0100 Subject: [PATCH] only check and display file limitation once --- capa/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capa/main.py b/capa/main.py index a7ac5b7b1..3f1272a97 100644 --- a/capa/main.py +++ b/capa/main.py @@ -1190,7 +1190,7 @@ def main(argv: Optional[List[str]] = None): meta = collect_metadata(argv, args.sample, args.format, args.os, args.rules, extractor, counts) meta.analysis.layout = compute_layout(rules, extractor, capabilities) - if isinstance(extractor, StaticFeatureExtractor) and has_file_limitation(rules, capabilities): + if isinstance(extractor, StaticFeatureExtractor) and found_file_limitation: # bail if capa's static feature extractor encountered file limitation e.g. a packed binary # do show the output in verbose mode, though. if not (args.verbose or args.vverbose or args.json):