Project

General

Profile

Actions
Copy link

Feature #663

closed
WM

LuaJIT relative matches

Feature #663: LuaJIT relative matches

Added by Will Metcalf over 13 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be very helpful to have relative matches for LuaJIT. The gmatch iterator in Lua seems rather slow, so it would be nice to have a "relative" modifier to the luajit keyword. One example might be multiple PDF objects that have been compressed using /FlateDecode. We may want to decompress content between stream and endstream. No reason to call this globally once and have lua iterate over the objects when we can do it in the rule lang.

WM Updated by Will Metcalf over 13 years ago Actions
Copy link
 #1

  • Tracker changed from Bug to Feature

VJ Updated by Victor Julien over 13 years ago Actions
Copy link
 #2

  • Assignee changed from Victor Julien to OISF Dev
  • Target version changed from 1.4 to TBD

Can you attach a test case? Pcap, rule and script?

VJ Updated by Victor Julien about 13 years ago Actions
Copy link
 #3

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Victor Julien

VJ Updated by Victor Julien almost 10 years ago Actions
Copy link
 #4

  • Status changed from Assigned to Closed
  • Assignee deleted (Victor Julien)
  • Target version deleted (TBD)

Lua scripts get an 'offset' argument that gives the position of the last match.

Actions
Copy link

Also available in: PDF Atom