search

VirusTotal / yara

The pattern matching swiss knife
https://virustotal.github.io/yara/
BSD 3-Clause "New" or "Revised" License
8.13k stars 1.42k forks source link

Scan hanging when scanning Pulse Audio Process #1929

Closed humpalum closed 6 months ago

humpalum commented 1 year ago

Describe the bug When scanning the "pulse audio daemon"-process my yara scan hangs even when using --timeout.

To Reproduce

  1. Create empty Yara Rule
  2. Run Yara on pulseaudio pid

Expected behavior Process should end. At the latest when timeout is reached

Screenshots We have done some debugging and could figure out the following infos: image image image image image

Please complete the following information:

secDre4mer commented 10 months ago

Also can happen with pipewire. pipewire memory maps files in /dev/snd (with 00:05 device ID), just like pulseaudio.

plusvic commented 10 months ago

Now that #1999 has been merged this issue should be fixed.