From c4ebb0a31d4ce22301d4436b0f00301e01e4382f Mon Sep 17 00:00:00 2001 From: Josh Soref <2119212+jsoref@users.noreply.github.com> Date: Wed, 4 Jan 2023 00:25:13 -0500 Subject: [PATCH] spelling: unescaped Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com> --- scripts/capa2yara.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/capa2yara.py b/scripts/capa2yara.py index 20a88594..7fd4ad41 100644 --- a/scripts/capa2yara.py +++ b/scripts/capa2yara.py @@ -288,7 +288,7 @@ def convert_rule(rule, rulename, cround, depth): # all .* in the regexes of capa look like they should be maximum 100 chars so take 1000 to speed up rules and prevent yara warnings on poor performance regex = regex.replace(".*", ".{,1000}") - # strange: capa accepts regexes with unsescaped / like - string: /com/exe4j/runtime/exe4jcontroller/i in capa-rules/compiler/exe4j/compiled-with-exe4j.yml, needs a fix for yara: + # strange: capa accepts regexes with unescaped / like - string: /com/exe4j/runtime/exe4jcontroller/i in capa-rules/compiler/exe4j/compiled-with-exe4j.yml, needs a fix for yara: # would assume that get_value_str() gives the raw string regex = re.sub(r"(?