Project

General

Profile

Actions

Feature #663

closed

LuaJIT relative matches

Added by Will Metcalf almost 9 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be very helpful to have relative matches for LuaJIT. The gmatch iterator in Lua seems rather slow, so it would be nice to have a "relative" modifier to the luajit keyword. One example might be multiple PDF objects that have been compressed using /FlateDecode. We may want to decompress content between stream and endstream. No reason to call this globally once and have lua iterate over the objects when we can do it in the rule lang.

Actions #1

Updated by Will Metcalf almost 9 years ago

  • Tracker changed from Bug to Feature
Actions #2

Updated by Victor Julien almost 9 years ago

  • Assignee changed from Victor Julien to OISF Dev
  • Target version changed from 1.4 to TBD

Can you attach a test case? Pcap, rule and script?

Actions #3

Updated by Victor Julien over 8 years ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Victor Julien
Actions #4

Updated by Victor Julien over 5 years ago

  • Status changed from Assigned to Closed
  • Assignee deleted (Victor Julien)
  • Target version deleted (TBD)

Lua scripts get an 'offset' argument that gives the position of the last match.

Actions

Also available in: Atom PDF