Skip to content

Commit 8760d29

Browse files
changed the process scanning deduplicated match content test, the rule now does not match itself
1 parent e2ff4e8 commit 8760d29

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

lib/src/scanner/tests.rs

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -829,16 +829,16 @@ fn scan_proc_overlapping_matches() {
829829
r#"
830830
rule slow {
831831
strings:
832-
$a = { 35 32 33 34 37 31 33 34 [16] ?? }
833-
$b = { ?? [16] 37 32 33 34 37 38 32 31 }
832+
$a = /52347134[a-z]{20}/
833+
$b = /[a-z]{20}72347821/
834834
condition:
835835
all of them
836836
}
837837
"#,
838838
)
839839
.unwrap();
840840

841-
let expected_match_content = b"52347134thisis17byteslong72347821";
841+
let expected_match_content = b"52347134somelowercaseletters72347821";
842842

843843
let mut scanner = Scanner::new(&rules);
844844
let scan_results = scanner.scan_proc(process::id()).unwrap();

0 commit comments

Comments
 (0)