From 07ae30875c1963fc490be0b89ddccee31f763b51 Mon Sep 17 00:00:00 2001 From: Willi Ballenthin Date: Tue, 11 Jun 2024 09:36:04 +0200 Subject: [PATCH] features: add aarch64 arch (#2144) * features: add aarch64 arch --- CHANGELOG.md | 1 + capa/features/common.py | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index da9482f0..beaa48ca 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,7 @@ - render maec/* fields #843 @s-ff - replace Halo spinner with Rich #2086 @s-ff - optimize rule matching #2080 @williballenthin +- add aarch64 as a valid architecture #2144 mehunhoff@google.com @williballenthin ### Breaking Changes diff --git a/capa/features/common.py b/capa/features/common.py index c4b7df8e..cb938f29 100644 --- a/capa/features/common.py +++ b/capa/features/common.py @@ -409,9 +409,10 @@ class Bytes(Feature): # other candidates here: https://docs.microsoft.com/en-us/windows/win32/debug/pe-format#machine-types ARCH_I386 = "i386" ARCH_AMD64 = "amd64" +ARCH_AARCH64 = "aarch64" # dotnet ARCH_ANY = "any" -VALID_ARCH = (ARCH_I386, ARCH_AMD64, ARCH_ANY) +VALID_ARCH = (ARCH_I386, ARCH_AMD64, ARCH_AARCH64, ARCH_ANY) class Arch(Feature):