yara-ffi 3.1.0 → 4.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. checksums.yaml +4 -4
  2. data/.github/copilot-instructions.md +266 -0
  3. data/.github/workflows/ruby.yml +69 -17
  4. data/CHANGELOG.md +90 -1
  5. data/DEVELOPMENT.md +188 -0
  6. data/Dockerfile +19 -11
  7. data/Gemfile.lock +38 -23
  8. data/README.md +56 -36
  9. data/USAGE.md +747 -0
  10. data/lib/yara/compiler.rb +161 -0
  11. data/lib/yara/ffi.rb +500 -111
  12. data/lib/yara/pattern_match.rb +178 -0
  13. data/lib/yara/scan_result.rb +573 -71
  14. data/lib/yara/scan_results.rb +224 -0
  15. data/lib/yara/scanner.rb +436 -45
  16. data/lib/yara/version.rb +5 -1
  17. data/lib/yara.rb +73 -15
  18. data/yara-ffi.gemspec +4 -4
  19. metadata +13 -15
  20. data/lib/yara/user_data.rb +0 -5
  21. data/lib/yara/yr_meta.rb +0 -10
  22. data/lib/yara/yr_namespace.rb +0 -5
  23. data/lib/yara/yr_rule.rb +0 -11
  24. data/lib/yara/yr_string.rb +0 -15
metadata CHANGED
@@ -1,14 +1,13 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: yara-ffi
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.1.0
4
+ version: 4.1.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Jonathan Hoyt
8
- autorequire:
9
8
  bindir: bin
10
9
  cert_chain: []
11
- date: 2022-04-18 00:00:00.000000000 Z
10
+ date: 1980-01-02 00:00:00.000000000 Z
12
11
  dependencies:
13
12
  - !ruby/object:Gem::Dependency
14
13
  name: ffi
@@ -24,36 +23,37 @@ dependencies:
24
23
  - - ">="
25
24
  - !ruby/object:Gem::Version
26
25
  version: '0'
27
- description: Use libyara from Ruby via ffi bindings.
26
+ description: Use YARA-X from Ruby via FFI bindings.
28
27
  email:
29
28
  - jonmagic@gmail.com
30
29
  executables: []
31
30
  extensions: []
32
31
  extra_rdoc_files: []
33
32
  files:
33
+ - ".github/copilot-instructions.md"
34
34
  - ".github/workflows/ruby.yml"
35
35
  - ".gitignore"
36
36
  - ".rubocop.yml"
37
37
  - CHANGELOG.md
38
38
  - CODE_OF_CONDUCT.md
39
+ - DEVELOPMENT.md
39
40
  - Dockerfile
40
41
  - Gemfile
41
42
  - Gemfile.lock
42
43
  - LICENSE.txt
43
44
  - README.md
44
45
  - Rakefile
46
+ - USAGE.md
45
47
  - bin/console
46
48
  - bin/setup
47
49
  - lib/yara.rb
50
+ - lib/yara/compiler.rb
48
51
  - lib/yara/ffi.rb
52
+ - lib/yara/pattern_match.rb
49
53
  - lib/yara/scan_result.rb
54
+ - lib/yara/scan_results.rb
50
55
  - lib/yara/scanner.rb
51
- - lib/yara/user_data.rb
52
56
  - lib/yara/version.rb
53
- - lib/yara/yr_meta.rb
54
- - lib/yara/yr_namespace.rb
55
- - lib/yara/yr_rule.rb
56
- - lib/yara/yr_string.rb
57
57
  - script/bootstrap
58
58
  - script/test
59
59
  - yara-ffi.gemspec
@@ -63,8 +63,7 @@ licenses:
63
63
  metadata:
64
64
  homepage_uri: https://github.com/jonmagic/yara-ffi
65
65
  source_code_uri: https://github.com/jonmagic/yara-ffi
66
- changelog_uri: https://github.com/jonmagic/yara-ffi/main/CHANGELOG.md,
67
- post_install_message:
66
+ changelog_uri: https://github.com/jonmagic/yara-ffi/blob/main/CHANGELOG.md
68
67
  rdoc_options: []
69
68
  require_paths:
70
69
  - lib
@@ -72,15 +71,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
72
71
  requirements:
73
72
  - - ">="
74
73
  - !ruby/object:Gem::Version
75
- version: 2.4.0
74
+ version: 3.2.0
76
75
  required_rubygems_version: !ruby/object:Gem::Requirement
77
76
  requirements:
78
77
  - - ">="
79
78
  - !ruby/object:Gem::Version
80
79
  version: '0'
81
80
  requirements: []
82
- rubygems_version: 3.3.3
83
- signing_key:
81
+ rubygems_version: 3.6.9
84
82
  specification_version: 4
85
- summary: A Ruby API to libyara.
83
+ summary: A Ruby API to YARA-X.
86
84
  test_files: []
data/lib/yara/user_data.rb DELETED
@@ -1,5 +0,0 @@
1
- module Yara
2
- class UserData < FFI::Struct
3
- layout :number, :int
4
- end
5
- end
data/lib/yara/yr_meta.rb DELETED
@@ -1,10 +0,0 @@
1
- module Yara
2
- class YrMeta < FFI::Struct
3
- layout \
4
- :identifier, :string,
5
- :string, :string,
6
- :integer, :ulong_long,
7
- :type, :int,
8
- :flags, :int
9
- end
10
- end
data/lib/yara/yr_namespace.rb DELETED
@@ -1,5 +0,0 @@
1
- module Yara
2
- class YrNamespace < FFI::Struct
3
- layout :name, :string
4
- end
5
- end
data/lib/yara/yr_rule.rb DELETED
@@ -1,11 +0,0 @@
1
- module Yara
2
- class YrRule < FFI::Struct
3
- layout \
4
- :flags, :int,
5
- :identifier, :string,
6
- :tags, :string,
7
- :metas, :pointer,
8
- :strings, :pointer,
9
- :ns, YrNamespace.ptr
10
- end
11
- end
data/lib/yara/yr_string.rb DELETED
@@ -1,15 +0,0 @@
1
- module Yara
2
- class YrString < FFI::Struct
3
- layout \
4
- :flags, :uint,
5
- :idx, :uint,
6
- :fixed_offset, :ulong_long,
7
- :rule_idx, :uint,
8
- :length, :uint,
9
- :string, :pointer,
10
- :chained_to, :pointer,
11
- :chain_gap_min, :uint,
12
- :chain_gap_max, :uint,
13
- :identifier, :string
14
- end
15
- end