fix: [module extractor] fix invalid yara offset

This commit is contained in:
Terrtia 2023-08-08 11:26:16 +02:00
parent 529a24c191
commit 4dc5527c1a
No known key found for this signature in database
GPG key ID: 1E1B1F50D84613D0

View file

@ -106,11 +106,11 @@ def convert_byte_offset_to_string(b_content, offset):
byte_chunk = b_content[:offset + 1] byte_chunk = b_content[:offset + 1]
try: try:
string_chunk = byte_chunk.decode() string_chunk = byte_chunk.decode()
offset = len(string_chunk) - 1
return offset
except UnicodeDecodeError as e: except UnicodeDecodeError as e:
logger.error(f'Yara offset converter error, {e.reason}\n{byte_chunk}\n{offset}') logger.error(f'Yara offset converter error, {str(e)}\n{offset}/{len(b_content)}')
string_chunk = byte_chunk return convert_byte_offset_to_string(b_content, offset)
offset = len(string_chunk) - 1
return offset
# TODO RETRO HUNTS # TODO RETRO HUNTS