From 169b3d60a81ff0ac8fc7be1ef2d1c67ea3292678 Mon Sep 17 00:00:00 2001
From: Willi Ballenthin <willi.ballenthin@gmail.com>
Date: Wed, 5 Jul 2023 18:04:15 +0200
Subject: [PATCH] import-to-ida: update to use v5 JSON format

closes #1584
---
 scripts/import-to-ida.py | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/scripts/import-to-ida.py b/scripts/import-to-ida.py
index c0f788c6..fd762f58 100644
--- a/scripts/import-to-ida.py
+++ b/scripts/import-to-ida.py
@@ -94,8 +94,11 @@ def main():
 
         name = rule["meta"]["name"]
         ns = rule["meta"].get("namespace", "")
-        for va in rule["matches"].keys():
-            va = int(va)
+        for address, match in rule["matches"]:
+            if address["type"] != "absolute":
+                continue
+
+            va = address["value"]
             rows.append((ns, name, va))
 
     # order by (namespace, name) so that like things show up together