viper-framework / viper

Binary analysis and management framework
Other
1.54k stars 353 forks source link

libyara.so undefined symbol: Lookup rule #761

Closed delbs27 closed 4 years ago

delbs27 commented 4 years ago

Hi, installed the latest version of viper on ubuntu 18.04 as per the first-launch doco https://viper-framework.readthedocs.io/en/latest/installation/index.html#first-launch.

Install proceeded without any errors reported.

first launch of viper-cli results in the below error

viper-cli Traceback (most recent call last): File "./viper-cli", line 10, in from viper.core.ui import console File "/home/delbs/viper/viper/core/ui/console.py", line 19, in from viper.core.plugins import modules File "/home/delbs/viper/viper/core/plugins.py", line 81, in modules = load_modules() File "/home/delbs/viper/viper/core/plugins.py", line 62, in load_modules module = importlib.import_module(module_name) File "/usr/lib/python3.6/importlib/init.py", line 126, in import_module return _bootstrap._gcd_import(name[level:], package, level) File "/home/delbs/viper/viper/modules/rat.py", line 19, in import yara File "/usr/local/lib/python3.6/dist-packages/yara/init.py", line 7, in from yara.rules import compile File "/usr/local/lib/python3.6/dist-packages/yara/rules.py", line 17, in from yara.libyara_wrapper import * File "/usr/local/lib/python3.6/dist-packages/yara/libyara_wrapper.py", line 362, in libyaradll.lookup_rule.restype = POINTER(RULE) File "/usr/lib/python3.6/ctypes/init.py", line 361, in getattr func = self.getitem(name) File "/usr/lib/python3.6/ctypes/init.py", line 366, in getitem func = self._FuncPtr((name_or_ordinal, self)) AttributeError: /usr/lib/libyara.so: undefined symbol: lookup_rule

yara and yara-python modules are installed, yara from source and yara-python from pip.

Has anyone else come across this error and what i could be missing for this to error to occur?

Thanks in advance

delbs27 commented 4 years ago

Cancel this, installed under a clean venv and it works fine, i think i have an issue with yara globally installed so a clean venv_viper fixed this.