BF is not valid while scanning

GoogleCodeExporter commented 9 years ago

What steps will reproduce the problem?
1. create a Signature with e.g. four classes and with this BF: "a || b || c || 
d"
2. create the signature database with androcsign.py (no errors occour)
3. use it on the sample from which the signature was generated
4. error message occurs several times: Undefined token "|| b || c || d " found 
at position 2.

What is the expected output? What do you see instead?
seems to be that the BF is not accepted.
Inside the signature database the BF is valid: "a || b || c || d"

What version of the product are you using? On what operating system?
latest hg on ubuntu precise

Original issue reported on code.google.com by 5hp...@gmail.com on 29 Jun 2012 at 9:41

GoogleCodeExporter commented 9 years ago

installed muparser 2.2.2 - same problem.
tried with commit 1a43fd59b3bd and earlier, problem persists

Original comment by 5hp...@gmail.com on 29 Jun 2012 at 9:58

GoogleCodeExporter commented 9 years ago

okay... the problem is that only "or" is accepted and not "||"... why?

Original comment by 5hp...@gmail.com on 29 Jun 2012 at 10:18

GoogleCodeExporter commented 9 years ago

Hi,

yes because muparser doesn't handle the "||" :) You must use "or" "and" etc

Original comment by anthony....@gmail.com on 2 Jul 2012 at 3:58

Changed state: Invalid

elllusion / androguard

BF is not valid while scanning #56