From 1790dab1ab966cdb8c8ba6dd0589859fdeb58dd8 Mon Sep 17 00:00:00 2001 From: Ronnie Salomonsen Date: Wed, 19 Jul 2023 11:27:52 +0200 Subject: [PATCH 1/2] rules: Add forwarded export characteristics to rule syntax under file_scope --- capa/rules/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/capa/rules/__init__.py b/capa/rules/__init__.py index 066c3a11..45d822a5 100644 --- a/capa/rules/__init__.py +++ b/capa/rules/__init__.py @@ -106,6 +106,7 @@ SUPPORTED_FEATURES: Dict[str, Set] = { capa.features.common.Class, capa.features.common.Namespace, capa.features.common.Characteristic("mixed mode"), + capa.features.common.Characteristic("forwarded export"), }, FUNCTION_SCOPE: { capa.features.common.MatchedRule, From de6bdf062195807d0bdaf94ca46217b7abc584d7 Mon Sep 17 00:00:00 2001 From: Ronnie Salomonsen Date: Wed, 19 Jul 2023 15:05:10 +0200 Subject: [PATCH 2/2] Update CHANGELOG with fix for the new feature for forwarded export characteristics --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2f58683b..e66b9d9f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -82,6 +82,7 @@ For those that use capa as a library, we've introduced some limited breaking cha - output: don't leave behind traces of progress bar @williballenthin - import-to-ida: fix bug introduced with JSON report changes in v5 #1584 @williballenthin - main: don't show spinner when emitting debug messages #1636 @williballenthin +- rules: add forwarded export characteristics to rule syntax file scope #1653 @RonnieSalomonsen ### capa explorer IDA Pro plugin