mirror of
https://github.com/mandiant/capa.git
synced 2025-12-22 07:10:29 -08:00
adding support for string features with special characters e.g. '\n'
This commit is contained in:
@@ -681,6 +681,24 @@ def test_explicit_string_values_int():
|
||||
assert (String("0x123") in children) == True
|
||||
|
||||
|
||||
def test_string_values_special_characters():
|
||||
rule = textwrap.dedent(
|
||||
"""
|
||||
rule:
|
||||
meta:
|
||||
name: test rule
|
||||
features:
|
||||
- or:
|
||||
- string: hello\\r\\nworld
|
||||
- string: some\\path
|
||||
"""
|
||||
)
|
||||
r = capa.rules.Rule.from_yaml(rule)
|
||||
children = list(r.statement.get_children())
|
||||
assert (String("hello\r\nworld") in children) == True
|
||||
assert (String("some\\path") in children) == True
|
||||
|
||||
|
||||
def test_regex_values_always_string():
|
||||
rules = [
|
||||
capa.rules.Rule.from_yaml(
|
||||
|
||||
Reference in New Issue
Block a user