gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-21 23:00:29 -08:00
Code Issues Packages Projects Releases Wiki Activity

import-to-ida: update to use v5 JSON format

Browse Source 
closes #1584
This commit is contained in:
Willi Ballenthin
2023-07-05 18:04:15 +02:00
parent bb053561ef
commit 169b3d60a8
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
scripts/import-to-ida.py
View File

@@ -94,8 +94,11 @@ def main():
name = rule["meta"]["name"] name = rule["meta"]["name"]
ns = rule["meta"].get("namespace", "") ns = rule["meta"].get("namespace", "")
for va in rule["matches"].keys(): for address, match in rule["matches"]:
va = int(va) if address["type"] != "absolute":
continue
va = address["value"]
rows.append((ns, name, va)) rows.append((ns, name, va))
# order by (namespace, name) so that like things show up together # order by (namespace, name) so that like things show up together