gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-22 23:26:21 -08:00
Code Issues Packages Projects Releases Wiki Activity

extractor: remove characteristic(switch)

Browse Source 
Get rid of the `characteristic(switch)` feature as any of our rules use
it and its analysis is not very easy. Analysis results most likely
differ across backends, leading to inconsistency.
This commit is contained in:
Ana María Martínez Gómez
2020-08-13 16:37:01 +02:00
parent 199cccaef9
commit adaac03d1d
11 changed files with 7 additions and 92 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/test_freeze.py
View File

@@ -23,7 +23,7 @@ EXTRACTOR = capa.features.extractors.NullFeatureExtractor(
"file features": [(0x402345, capa.features.Characteristic("embedded pe")),],
"functions": {
0x401000: {
"features": [(0x401000, capa.features.Characteristic("switch")),],
"features": [(0x401000, capa.features.Characteristic("indirect call")),],
"basic blocks": {
0x401000: {
"features": [(0x401000, capa.features.Characteristic("tight loop")),],