search

kolos450 / SsdeepNET

MIT License
5 stars 2 forks source link

fixed algo issue #2

Closed rustysec closed 7 years ago

rustysec commented 7 years ago

I'm using ssdeep as the base for tests, and most files produce identical hashes. however, for a few i get a final character mismatch. For example:

ssdeep: 3072:PuxJiNAcezcDuKZDKCUoqH62EY+AksyudLOBtxHiel42r1L3CzKPbN+yBReqGo:1CGuKZD75f
SsdeepNET: 3072:PuxJiNAcezcDuKZDKCUoqH62EY+AksyudLOBtxHiel42r1L3CzKPbN+yBReqGo:1CGuKZD75H

After digging through the ssdeep 2.13 code, the problem seems to stem from line ~251. After making the small change i get:

ssdeep: 3072:PuxJiNAcezcDuKZDKCUoqH62EY+AksyudLOBtxHiel42r1L3CzKPbN+yBReqGo:1CGuKZD75f
SsdeepNET: 3072:PuxJiNAcezcDuKZDKCUoqH62EY+AksyudLOBtxHiel42r1L3CzKPbN+yBReqGo:1CGuKZD75f