VirusTotal / yara

The pattern matching swiss knife
https://virustotal.github.io/yara/
BSD 3-Clause "New" or "Revised" License
8.08k stars 1.43k forks source link

Cannot function properly under the mounted path in VMware linux virtual machine. #1982

Open gongchengjinlove opened 10 months ago

gongchengjinlove commented 10 months ago

Describe the bug VMware virtual machine mount path can't scan file or fd.

To Reproduce 1.Map a directory to a virtual machine in VMware Workstation. 2.Use the library functions yr_scanner_scan_file or yr_scanner_scan_fd to scan files mounted within the virtual machine. 3.Encounter the error "ERROR_COULD_NOT_OPEN_FILE."

Expected behavior scan files under the vmhgfs file system

Screenshots If applicable, add screenshots to help explain your problem. image image image

Please complete the following information:

Additional context filemap.c -> yr_filemap_map_fd() -> #ifdef linux -> fstatfs()