845df282ef
tests: split out match tests and validate alternative algorithms
2021-11-10 12:44:58 -07:00
3e74da96a6
engine: make short circuiting configurable
2021-11-08 14:55:11 -07:00
9fa9c6a5d0
tests: add test demonstrating short circuiting
2021-11-08 14:07:44 -07:00
6989e8b8cf
rules: add substring feature
...
closes #737
2021-08-24 11:35:01 -06:00
f013815b2a
features: rename legacy term arch to bitness
...
makes space for upcoming feature `arch: ` for things like i386/amd64/aarch64
2021-08-16 12:21:25 -06:00
527e993bb4
engine: remove dependency on rules, fixing circular import
2021-06-09 22:30:43 -06:00
ac59e50b5f
move capa/features/__init__.py logic to common.py
...
also cleanup imports across the board,
thanks to pylance.
2021-06-09 22:20:53 -06:00
34e7991081
black 20.8b1 updates
2020-08-27 11:26:28 +02:00
b81b5e5993
rules: add support for arch flavors of Number and Offset features
...
closes #210
2020-08-03 16:28:47 -06:00
a74ab922a3
Get rid of * for Statement
...
They are not needed and complicate the code and make more difficult to
add more parameters to the initialization of Statements.
This produces many changes in the tests. The alternative would be to add
a parameter None in all of them, which are also a lot of changes.
2020-07-28 14:20:13 +02:00
baeea5b6ec
*: update license header to reference Apache 2.0
...
closes #173
2020-07-22 15:05:24 -06:00
3faf175da7
*: add license header
...
closes #144
2020-07-15 14:14:53 -06:00
c185e9ef09
pep8: black
2020-07-02 10:32:26 -06:00
db2b1caeae
Merge branch 'master' into fmt-black
2020-07-02 10:25:24 -06:00
d23ef48bb6
pep8
2020-07-01 12:33:13 -06:00
9aba2eb3a5
rules: range: correct handling of range with min==0
...
closes #57
2020-06-30 00:44:22 -06:00
970977ade5
tests: demonstrate a bit more depth to namespace matching
2020-06-30 00:20:40 -06:00
990c2010e9
pep8
2020-06-29 05:57:46 -06:00
3d0bd64e1b
engine, rules: support matching namespaces, not just rule names
...
closes #37
2020-06-29 05:54:56 -06:00
7e1e9e6618
Get rid of the Element class
...
The `Element` class is just used for testing. By using `Element` we are
not testing the actual code. Also, every time we implement a new feature
for the `Feature` class, we need to implement it for `Element` as well.
Replace `Element` by `Integer`.
2020-06-24 18:05:52 +02:00
add3537447
import source files, forgetting about 938 prior commits
2020-06-18 09:13:19 -06:00
William Ballenthin