From 143d5ae7b78e5bd82cbb5b9f367bb0d1939a268e Mon Sep 17 00:00:00 2001 From: Leonard Kugis Date: Wed, 30 Apr 2025 01:23:43 +0200 Subject: yara: Added missing modifier flag for store_identifier_signature. --- yara.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'yara.py') diff --git a/yara.py b/yara.py index f198473..34b3378 100644 --- a/yara.py +++ b/yara.py @@ -320,7 +320,7 @@ class YaraSignature(object): index_map_data = index_map.compile() n_blocks_data = index_elements.compile_index(len(self.blocks)) identifier_size_data = index_identifier.compile_index(len(identifier_data)) - modifiers = self.modifiers_origin | (index_elements.compile_modifier()[0] << 8) | (index_data.compile_modifier()[0] << 10) | ((1 if store_index_map_string_blocks else 0) << 14) + modifiers = self.modifiers_origin | (index_elements.compile_modifier()[0] << 8) | (index_data.compile_modifier()[0] << 10) | (index_identifier.compile_modifier()[0] << 12) | ((1 if store_index_map_string_blocks else 0) << 14) | ((1 if store_identifier_signature else 0) << 15) fmt = self.__FORMAT.format( size_identifier_size_data=(len(identifier_size_data) if store_identifier_signature else 0), size_identifier_data=(len(identifier_data) if store_identifier_signature else 0), -- cgit v1.2.3