Skip to content

Commit

Permalink
Start raising warnings about non-ascii characters in strings.
Browse files Browse the repository at this point in the history
  • Loading branch information
plusvic committed Mar 11, 2021
1 parent 1581588 commit a095c08
Show file tree
Hide file tree
Showing 7 changed files with 419 additions and 330 deletions.
10 changes: 10 additions & 0 deletions docs/writingrules.rst
Original file line number Diff line number Diff line change
Expand Up @@ -294,6 +294,16 @@ available in the C language:
* - ``\xdd``
- Any byte in hexadecimal notation

In all versions of YARA before 4.1.0 text strings accepted any kind of unicode
characters, regardless of their encoding. Those characters were interpreted by
YARA as raw bytes, and therefore the final string was actually determined by the
encoding format used by your text editor. This never meant to be a feature, the
original intention always was that YARA strings should be ASCII-only and YARA
4.1.0 started to raise warnings about non-ASCII characters in strings. This
limitation does not apply to strings in the metadata section or comments. See
more details [here](https://github.com/VirusTotal/yara/wiki/Unicode-characters-in-YARA)


Case-insensitive strings
^^^^^^^^^^^^^^^^^^^^^^^^

Expand Down
Loading

0 comments on commit a095c08

Please sign in to comment.