This commit is contained in:
Willi Ballenthin
2022-03-29 13:00:28 -06:00
parent fb6b60bee3
commit 49adb8de0c
2 changed files with 3 additions and 3 deletions

View File

@@ -101,7 +101,7 @@ SUPPORTED_FEATURES: Dict[str, Set] = {
capa.features.common.Characteristic("embedded pe"), capa.features.common.Characteristic("embedded pe"),
capa.features.common.String, capa.features.common.String,
capa.features.common.Format, capa.features.common.Format,
}, },
FUNCTION_SCOPE: { FUNCTION_SCOPE: {
capa.features.common.MatchedRule, capa.features.common.MatchedRule,
capa.features.basicblock.BasicBlock, capa.features.basicblock.BasicBlock,

View File

@@ -327,7 +327,7 @@ def test_count_bb(z9324d_extractor):
def test_instruction_scope(z9324d_extractor): def test_instruction_scope(z9324d_extractor):
# .text:004071A4 68 E8 03 00 00 push 3E8h # .text:004071A4 68 E8 03 00 00 push 3E8h
rules = capa.rules.RuleSet( rules = capa.rules.RuleSet(
[ [
capa.rules.Rule.from_yaml( capa.rules.Rule.from_yaml(
@@ -355,7 +355,7 @@ def test_instruction_scope(z9324d_extractor):
def test_instruction_subscope(z9324d_extractor): def test_instruction_subscope(z9324d_extractor):
# .text:00406F60 sub_406F60 proc near # .text:00406F60 sub_406F60 proc near
# [...] # [...]
# .text:004071A4 68 E8 03 00 00 push 3E8h # .text:004071A4 68 E8 03 00 00 push 3E8h
rules = capa.rules.RuleSet( rules = capa.rules.RuleSet(
[ [
capa.rules.Rule.from_yaml( capa.rules.Rule.from_yaml(