gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-21 23:00:29 -08:00
Code Issues Packages Projects Releases Wiki Activity

extractor: remove characteristic(switch)

Browse Source 
Get rid of the `characteristic(switch)` feature as any of our rules use
it and its analysis is not very easy. Analysis results most likely
differ across backends, leading to inconsistency.
This commit is contained in:
Ana María Martínez Gómez
2020-08-13 16:37:01 +02:00
parent 199cccaef9
commit adaac03d1d
11 changed files with 7 additions and 92 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
tests/test_ida_features.py
View File

@@ -243,17 +243,6 @@ def test_stackstring_features():
assert capa.features.Characteristic("stack string") in features
@pytest.mark.skip(reason="IDA Pro tests must be run within IDA")
def test_switch_features():
f = get_extractor().get_function(0x409411)
features = extract_function_features(f)
assert capa.features.Characteristic("switch") in features
f = get_extractor().get_function(0x409393)
features = extract_function_features(f)
assert capa.features.Characteristic("switch") not in features
@pytest.mark.skip(reason="IDA Pro tests must be run within IDA")
def test_function_calls_to():
# this function is used in a function pointer