head	1.16;
access;
symbols
	pkgsrc-2026Q1:1.16.0.2
	pkgsrc-2026Q1-base:1.16
	pkgsrc-2025Q4:1.15.0.14
	pkgsrc-2025Q4-base:1.15
	pkgsrc-2025Q3:1.15.0.12
	pkgsrc-2025Q3-base:1.15
	pkgsrc-2025Q2:1.15.0.10
	pkgsrc-2025Q2-base:1.15
	pkgsrc-2025Q1:1.15.0.8
	pkgsrc-2025Q1-base:1.15
	pkgsrc-2024Q4:1.15.0.6
	pkgsrc-2024Q4-base:1.15
	pkgsrc-2024Q3:1.15.0.4
	pkgsrc-2024Q3-base:1.15
	pkgsrc-2024Q2:1.15.0.2
	pkgsrc-2024Q2-base:1.15
	pkgsrc-2024Q1:1.14.0.4
	pkgsrc-2024Q1-base:1.14
	pkgsrc-2023Q4:1.14.0.2
	pkgsrc-2023Q4-base:1.14
	pkgsrc-2023Q3:1.13.0.8
	pkgsrc-2023Q3-base:1.13
	pkgsrc-2023Q2:1.13.0.6
	pkgsrc-2023Q2-base:1.13
	pkgsrc-2023Q1:1.13.0.4
	pkgsrc-2023Q1-base:1.13
	pkgsrc-2022Q4:1.13.0.2
	pkgsrc-2022Q4-base:1.13
	pkgsrc-2022Q3:1.12.0.12
	pkgsrc-2022Q3-base:1.12
	pkgsrc-2022Q2:1.12.0.10
	pkgsrc-2022Q2-base:1.12
	pkgsrc-2022Q1:1.12.0.8
	pkgsrc-2022Q1-base:1.12
	pkgsrc-2021Q4:1.12.0.6
	pkgsrc-2021Q4-base:1.12
	pkgsrc-2021Q3:1.12.0.4
	pkgsrc-2021Q3-base:1.12
	pkgsrc-2021Q2:1.12.0.2
	pkgsrc-2021Q2-base:1.12
	pkgsrc-2021Q1:1.9.0.10
	pkgsrc-2021Q1-base:1.9
	pkgsrc-2020Q4:1.9.0.8
	pkgsrc-2020Q4-base:1.9
	pkgsrc-2020Q3:1.9.0.6
	pkgsrc-2020Q3-base:1.9
	pkgsrc-2020Q2:1.9.0.4
	pkgsrc-2020Q2-base:1.9
	pkgsrc-2020Q1:1.9.0.2
	pkgsrc-2020Q1-base:1.9
	pkgsrc-2019Q4:1.8.0.4
	pkgsrc-2019Q4-base:1.8
	pkgsrc-2019Q3:1.7.0.2
	pkgsrc-2019Q3-base:1.7
	pkgsrc-2019Q2:1.5.0.14
	pkgsrc-2019Q2-base:1.5
	pkgsrc-2019Q1:1.5.0.12
	pkgsrc-2019Q1-base:1.5
	pkgsrc-2018Q4:1.5.0.10
	pkgsrc-2018Q4-base:1.5
	pkgsrc-2018Q3:1.5.0.8
	pkgsrc-2018Q3-base:1.5
	pkgsrc-2018Q2:1.5.0.6
	pkgsrc-2018Q2-base:1.5
	pkgsrc-2018Q1:1.5.0.4
	pkgsrc-2018Q1-base:1.5
	pkgsrc-2017Q4:1.5.0.2
	pkgsrc-2017Q4-base:1.5
	pkgsrc-2017Q3:1.4.0.6
	pkgsrc-2017Q3-base:1.4
	pkgsrc-2017Q2:1.4.0.2
	pkgsrc-2017Q2-base:1.4
	pkgsrc-2017Q1:1.2.0.16
	pkgsrc-2017Q1-base:1.2
	pkgsrc-2016Q4:1.2.0.14
	pkgsrc-2016Q4-base:1.2
	pkgsrc-2016Q3:1.2.0.12
	pkgsrc-2016Q3-base:1.2
	pkgsrc-2016Q2:1.2.0.10
	pkgsrc-2016Q2-base:1.2
	pkgsrc-2016Q1:1.2.0.8
	pkgsrc-2016Q1-base:1.2
	pkgsrc-2015Q4:1.2.0.6
	pkgsrc-2015Q4-base:1.2
	pkgsrc-2015Q3:1.2.0.4
	pkgsrc-2015Q3-base:1.2
	pkgsrc-2015Q2:1.2.0.2
	pkgsrc-2015Q2-base:1.2;
locks; strict;
comment	@# @;


1.16
date	2025.12.28.08.15.02;	author adam;	state Exp;
branches;
next	1.15;
commitid	aZWaPD7MSHRUo9oG;

1.15
date	2024.06.11.10.29.51;	author adam;	state Exp;
branches;
next	1.14;
commitid	FYjwZG3k4zB9jydF;

1.14
date	2023.10.24.22.11.01;	author wiz;	state Exp;
branches;
next	1.13;
commitid	MTsrqKm6aGrQAVJE;

1.13
date	2022.11.28.18.57.19;	author adam;	state Exp;
branches;
next	1.12;
commitid	YT566hiQE1ua9v3E;

1.12
date	2021.05.30.01.22.05;	author khorben;	state Exp;
branches;
next	1.11;
commitid	47L1UzfHbxy5T6VC;

1.11
date	2021.05.30.01.16.28;	author khorben;	state Exp;
branches;
next	1.10;
commitid	0N0XMZ7jUIh7Q6VC;

1.10
date	2021.05.14.11.47.57;	author nia;	state Exp;
branches;
next	1.9;
commitid	QSt9MltqgnQ4S6TC;

1.9
date	2020.01.18.21.50.50;	author jperkin;	state Exp;
branches;
next	1.8;
commitid	JW4hJgY8ZdoTFdTB;

1.8
date	2019.11.04.21.13.04;	author rillig;	state Exp;
branches;
next	1.7;
commitid	G51T39p39YNQTzJB;

1.7
date	2019.07.11.11.20.06;	author sevan;	state Exp;
branches;
next	1.6;
commitid	gOVyLZ2c1M2KlCuB;

1.6
date	2019.07.11.11.17.24;	author sevan;	state Exp;
branches;
next	1.5;
commitid	fBnCdFT0BgzOkCuB;

1.5
date	2017.11.01.19.29.30;	author minskim;	state Exp;
branches;
next	1.4;
commitid	CUitkd9lmBZ4TmdA;

1.4
date	2017.06.07.20.46.34;	author wiz;	state Exp;
branches
	1.4.6.1;
next	1.3;
commitid	geZS8eIrjwAD2uUz;

1.3
date	2017.05.15.15.27.31;	author khorben;	state Exp;
branches;
next	1.2;
commitid	31iArWJcOngrZuRz;

1.2
date	2015.06.06.08.57.18;	author pettai;	state Exp;
branches
	1.2.16.1;
next	1.1;
commitid	9FiWVcZaeRuLCloy;

1.1
date	2015.06.06.08.18.17;	author pettai;	state Exp;
branches;
next	;
commitid	dQ0C1ZQ32lKGqloy;

1.4.6.1
date	2017.11.12.11.36.49;	author bsiegert;	state Exp;
branches;
next	;
commitid	LRJvstRPxzFaVJeA;

1.2.16.1
date	2017.06.13.18.41.37;	author bsiegert;	state Exp;
branches;
next	;
commitid	olA1Sw5U0jjP9fVz;


desc
@@


1.16
log
@yara: updated to 4.5.5

4.5.5

Implement the --no-follow-symlinks option in Windows (6e11b5a).
BUGFIX: Revert YR_RE_SCAN_LIMIT back to 4096
BUGFIX: infinite loop while parsing corrupt resource directory in PE module
BUGFIX: improved detection whether a string requires all matches
BUGFIX: Heap overflow while loading hand-crafted compiled rules
@
text
@# $NetBSD: Makefile,v 1.15 2024/06/11 10:29:51 adam Exp $

.include "../../security/yara/Makefile.common"

DISTNAME=	yara-${YARA_VERSION}
CATEGORIES=	security
GITHUB_TAG=	v${YARA_VERSION}

COMMENT=	Pattern matching swiss knife for malware researchers
LICENSE=	modified-bsd

USE_FEATURES+=	strnlen
USE_LIBTOOL=	yes
USE_TOOLS+=	automake autoreconf flex pkg-config
GNU_CONFIGURE=	yes
TEST_TARGET=	check

PKGCONFIG_OVERRIDE+=	libyara/yara.pc.in

pre-configure:
	cd ${WRKSRC} && autoreconf -fiv

.include "../../security/openssl/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
@


1.15
log
@yara py-yara: updated to 4.5.1

YARA v4.5.1

Allow spaces in regexp repetition operators (e.g: {n, m}).
BUGFIX: matches operator was not matching empty strings
BUGFIX: Several bugs in array type handling in dotnet module
BUGFIX: Fix issue while parsing .NET files (5bf72f2).
BUGFIX: Fix issues while parsing PE resources (c009195, 4793b49).
BUGFIX: Infinite loop while parsing corrupt PE files (e453eb1).
BUGFIX: OOM errors while parsing corrupt PE files (4b9b4c0, 1be9811).
BUGFIX: Build issue in Alpine Linux due to pread64 not found
BUGFIX: Issue while parsing rich header in some PE files
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2023/10/24 22:11:01 wiz Exp $
d7 1
@


1.14
log
@*: bump for openssl 3
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2022/11/28 18:57:19 adam Exp $
a2 1
PKGREVISION= 1
@


1.13
log
@yara py-yara: updated to 4.2.3

YARA v4.2.3
BUGFIX: Fix security issue that can lead to arbitrary code execution.
BUGFIX: Fix incorrect logic in expressions like <quantifier> of <string_set> in (start..end
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2021/05/30 01:22:05 khorben Exp $
d3 1
@


1.12
log
@yara: update to version 4.1.1

YARA v4.1.1

 * BUGFIX: Accept the "+" character as valid in DLL names (#1501).
 * BUGFIX: Buffer overrun in "macho" module.
 * BUGFIX: Undefined behavior in Windows implementation of yr_filemap_xxx functions (#1302).
 * BUGFIX: Crash due to consecutive jumps in hex strings (#1492).

The yara-python repository does not offer a corresponding release.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2021/05/30 01:16:28 khorben Exp $
d3 3
a5 1
DISTNAME=	yara-4.1.1
a6 1
MASTER_SITES=	${MASTER_SITE_GITHUB:=VirusTotal/}
d11 1
a11 1
USE_TOOLS+=	pkg-config automake autoreconf flex
d13 1
d15 1
a15 1
USE_FEATURES+=	strnlen
a22 1
.include "../../security/yara/Makefile.common"
@


1.11
log
@{,py-}yara: update to version 4.1.0

Since version 3.11.0:

YARA v4.1.0

 * New operators icontains, endswith, iendswith, startswith, istartswith.
 * Accept \t escape sequence in text strings.
 * Add --no-follow-links command-line option to yara.
 * Prevent yara from following links to "." (@@1D2D).
 * Implemented non-blocking scanning API (@@simonhf).
 * When a string causes too many matches, YARA raises a warning instead of failing (@@wxsBSD).
 * BUGFIX: The use of --timeout could hang yara when scanning directories or lists of files (#1481).
 * BUGFIX: Incorrect parsing of PE certificates (#1443).
 * BUGFIX: Short-circuit evaluation not working fine with undefined expressions.

YARA v4.1.0-rc2

 * Don't raise warnings for non-ASCII strings.

YARA v4.1.0-rc1

 * New operators icontains, endswith, iendswith, startswith, istartswith.
 * Raise warnings for non-ascii strings.
 * Accept \t escape sequence in text strings.
 * Add --no-follow-links command-line option to yara.
 * Prevent yara from following links to "." (@@1D2D).
 * Implemented non-blocking scanning API (@@simonhf).
 * When a string causes too many matches, YARA raises a warning instead of failing.

YARA v4.0.5

 * BUGFIX: Fix bug in "macho" module introduced in v4.0.4.

YARA v4.0.4

 * BUGFIX: Multiple out-of-bounds reads in "macho" module.

Credits to Luis Merino from X41 D-SEC GmbH for reporting these issues.

YARA v4.0.3

 * BUGFIX: Multiple out-of-bounds read in "dotnet" module.

YARA v4.0.2

 * BUGFIX: Use-after-free bug in PE module (#1287).
 * BUGFIX: Incorrect errors in rules when a single rule is badly formatted (#1294).
 * BUGFIX: Assertion failed with rules that have invalid syntax (#1295).
 * BUGFIX: Integer overflow causing missed matches on files larger than 2GB (#1304).
 * BUGFIX: Crashes in Mac OS while scanning binaries with a signature that can't be verified (#1309).

YARA v4.0.1

 * Update sandboxed API (#1276).
 * BUGFIX: Fix regression in exports parsing in PE module (2bf67e6).
 * BUGFIX: Fix unaligned accesses in ARM (e1654ae).

YARA v4.0.0

 * New string modifiers base64 and base64wide (#1185).
 * New string modifier private (#1096).
 * Iterators for dictionaries and arrays (#1141).
 * Multiple API changes.
 * Memory footprint greatly reduced, specially when compiling large numbers of rules.
 * New commmand-line option --scan-list (#1261).
 * Added pdb_path field to "pe" module.
 * Added export_details array to "pe" module.
 * Added exports_index functions to "pe" module.
 * Improvements to "cuckoo" module.
 * BUGFIX: PE files with multiple signatures are parsed correctly (#940).
 * BUGFIX: Fix PE rich header parsing (#1164).
 * BUGFIX: Buffer overruns in "dotnet" module (#1167, #1173).
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2021/05/14 11:47:57 nia Exp $
d3 1
a3 1
DISTNAME=	yara-${YARA_VERSION}
@


1.10
log
@yara: needs flex
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2020/01/18 21:50:50 jperkin Exp $
d3 1
a3 2
DISTNAME=	yara-${VERSION}
PKGREVISION=	1
d8 1
@


1.9
log
@*: Recursive revision bump for openssl 1.1.1.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2019/11/04 21:13:04 rillig Exp $
d10 1
a10 1
USE_TOOLS+=	pkg-config automake autoreconf
@


1.8
log
@security: align variable assignments

pkglint -Wall -F --only aligned --only indent -r

No manual corrections.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2019/07/11 11:20:06 sevan Exp $
d4 1
@


1.7
log
@More strnlen(3) users - from Joyent
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2019/07/11 11:17:24 sevan Exp $
d7 1
a7 1
COMMENT=        Pattern matching swiss knife for malware researchers
@


1.6
log
@use a tab
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2017/11/01 19:29:30 minskim Exp $
d12 1
@


1.5
log
@security/yara: Needs OpenSSL to build
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2017/06/07 20:46:34 wiz Exp $
d11 1
a11 1
GNU_CONFIGURE=          yes
@


1.4
log
@Simplify *yara packages.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2017/05/15 15:27:31 khorben Exp $
d18 1
@


1.4.6.1
log
@Pullup ticket #5629 - requested by sevan
security/yara: build fix

Revisions pulled up:
- security/yara/Makefile                                        1.5

---
   Module Name:    pkgsrc
   Committed By:   minskim
   Date:           Wed Nov  1 19:29:30 UTC 2017

   Modified Files:
           pkgsrc/security/yara: Makefile

   Log Message:
   security/yara: Needs OpenSSL to build
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2017/06/07 20:46:34 wiz Exp $
a17 1
.include "../../security/openssl/buildlink3.mk"
@


1.3
log
@Update security/{,py-yara} to version 3.5.0

The release notes mention:

  * Match length operator (http://yara.readthedocs.io/en/v3.5.0/writingrules.html#match-length)
  * Performance improvements
  * Less memory consumption while scanning processes
  * Exception handling when scanning memory blocks
  * Negative integers in meta fields
  * Added the --stack-size command-argument
  * Functions import_ordinal, is_dll, is_32bit and is_64bit added to PE module
  * Functions rich_signature.toolid and rich_signature.version added to PE module
  * Lots of bug fixes

The Python bindings are now released from a different tree, with the same
versioning apparently though.

"welcome to update" pettai@@
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2015/06/06 08:57:18 pettai Exp $
d3 1
a3 1
PKGNAME=	yara-${YAVER}
d5 1
a5 4

MASTER_SITES=	${MASTER_SITE_GITHUB:=VirusTotal/yara/archive/}

DIST_SUBDIR=	yara
a8 1
WRKSRC=		${WRKDIR}/yara-${YAVER}
@


1.2
log
@Cleanup the Makefile and move some common stuff to Makefile.common,
in preparation of additional yara-dependent stuff...
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2015/06/06 08:18:17 pettai Exp $
d6 4
@


1.2.16.1
log
@Pullup ticket #5475 - requested by khorben
security/py-yara: security fix
security/yara: security fix

Revisions pulled up:
- security/py-yara/Makefile                                     1.5
- security/py-yara/PLIST                                        1.2
- security/py-yara/distinfo                                     1.5-1.7
- security/yara/Makefile                                        1.3
- security/yara/Makefile.common                                 1.5-1.8
- security/yara/PLIST                                           1.3
- security/yara/distinfo                                        1.6-1.8

---
   Module Name:	pkgsrc
   Committed By:	khorben
   Date:		Mon May 15 15:27:31 UTC 2017

   Modified Files:
   	pkgsrc/security/py-yara: Makefile PLIST distinfo
   	pkgsrc/security/yara: Makefile Makefile.common PLIST distinfo

   Log Message:
   Update security/{,py-yara} to version 3.5.0

   The release notes mention:

      * Match length operator
   (http://yara.readthedocs.io/en/v3.5.0/writingrules.html#match-length)
      * Performance improvements
      * Less memory consumption while scanning processes
      * Exception handling when scanning memory blocks
      * Negative integers in meta fields
      * Added the --stack-size command-argument
      * Functions import_ordinal, is_dll, is_32bit and is_64bit added to PE
   module
      * Functions rich_signature.toolid and rich_signature.version added to
   PE module
      * Lots of bug fixes

   The Python bindings are now released from a different tree, with the same
   versioning apparently though.

   "welcome to update" pettai@@

---
   Module Name:	pkgsrc
   Committed By:	khorben
   Date:		Mon May 15 15:34:12 UTC 2017

   Modified Files:
   	pkgsrc/security/yara: Makefile.common

   Log Message:
   Set myself as the maintainer

---
   Module Name:	pkgsrc
   Committed By:	khorben
   Date:		Wed Jun  7 20:11:42 UTC 2017

   Modified Files:
   	pkgsrc/security/py-yara: distinfo
   	pkgsrc/security/yara: Makefile.common distinfo

   Log Message:
   Package yara 3.6.0

   In the release notes:
     * .NET module (Wesley Shields)
     * New features for ELF module (Jacob Baines)
     * Fix endianness issues (Hilko Bengen)
     * Function yr_compiler_add_fd added to libyara
     * MAX_THREADS limit can be arbitrarily increased (Emerson R. Wiley)
     * Added --fail-on-warnings command-line option
     * Multiple bug fixes

---
   Module Name:	pkgsrc
   Committed By:	khorben
   Date:		Wed Jun  7 20:27:37 UTC 2017

   Modified Files:
   	pkgsrc/security/py-yara: distinfo
   	pkgsrc/security/yara: Makefile.common distinfo

   Log Message:
   Package yara 3.6.1

   In the release notes:

     * BUGFIX: Stack overflow caused by uncontrolled recursiveness
   (CVE-2017-9304)
     * BUGFIX: pe.overlay.size was undefined if the PE didn't have an
   overlay. Now it's set to 0 in those cases.
     * BUGFIX: Fix initalization issue that could cause a crash if rules
   compiled with a 32bit yarac is used with a 64bit yara.
@
text
@d1 1
a1 1
# $NetBSD$
a5 4
MASTER_SITES=	${MASTER_SITE_GITHUB:=VirusTotal/yara/archive/}

DIST_SUBDIR=	yara

@


1.1
log
@YARA is a tool aimed at (but not limited to) helping malware
researchers to identify and classify malware samples. With YARA
you can create descriptions of malware families (or whatever you
want to describe) based on textual or binary patterns.
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 2
DISTNAME=	v3.3.0
PKGNAME=	yara-3.3.0
a4 1
MASTER_SITES=	${MASTER_SITE_GITHUB:=plusvic/yara/archive/}
d6 1
a6 4
MAINTAINER=	pettai@@NetBSD.org
HOMEPAGE=	https://plusvic.github.io/yara/
COMMENT=	Pattern matching swiss knife for malware researchers
LICENSE=	apache-2.0
d8 1
a8 1
WRKSRC=		${WRKDIR}/yara-3.3.0
d18 1
@

