chore: dump cputype and cpusubtype as hex numbers.

VirusTotal · Jan 31, 2024 · 936e189 · 936e189
1 parent c4867e9
commit 936e189
Show file tree

Hide file tree

Showing 11 changed files with 32 additions and 32 deletions.
diff --git a/...macho/tests/testdata/01ac68a14f0ff5faa72bb33e768bfaae4d21de61f776e2405324c498ef52b21b.out b/...macho/tests/testdata/01ac68a14f0ff5faa72bb33e768bfaae4d21de61f776e2405324c498ef52b21b.out
@@ -1,6 +1,6 @@
 magic: 0xcffaedfe
-cputype: 16777223
-cpusubtype: 3
+cputype: 0x1000007
+cpusubtype: 0x3
 filetype: 8
 ncmds: 28
 sizeofcmds: 2936

diff --git a/...macho/tests/testdata/3d27411e4465ae14ab2d02e1f2a6dafb2bb8114803e8b26c0652ce4afccb94e1.out b/...macho/tests/testdata/3d27411e4465ae14ab2d02e1f2a6dafb2bb8114803e8b26c0652ce4afccb94e1.out
@@ -1,6 +1,6 @@
 magic: 0xcefaedfe
-cputype: 7
-cpusubtype: 3
+cputype: 0x7
+cpusubtype: 0x3
 filetype: 2
 ncmds: 20
 sizeofcmds: 2120

diff --git a/...macho/tests/testdata/4d0725d5c506c7ec26be89ec12b53a00bae94f868ce65a3352177dd6a75797ff.out b/...macho/tests/testdata/4d0725d5c506c7ec26be89ec12b53a00bae94f868ce65a3352177dd6a75797ff.out
@@ -1,6 +1,6 @@
 magic: 0xfeedface
-cputype: 18
-cpusubtype: 0
+cputype: 0x12
+cpusubtype: 0x0
 filetype: 2
 ncmds: 18
 sizeofcmds: 2616

diff --git a/...macho/tests/testdata/edf47dd000b9fdf4519fb61c28d329a5bf085619bbde2c4146b0cc00ebad21c8.out b/...macho/tests/testdata/edf47dd000b9fdf4519fb61c28d329a5bf085619bbde2c4146b0cc00ebad21c8.out
@@ -1,6 +1,6 @@
 magic: 0xcffaedfe
-cputype: 16777228
-cpusubtype: 0
+cputype: 0x100000c
+cpusubtype: 0x0
 filetype: 6
 ncmds: 107
 sizeofcmds: 11416

diff --git a/yara-x/src/modules/macho/tests/testdata/macho_ppc_file.out b/yara-x/src/modules/macho/tests/testdata/macho_ppc_file.out
@@ -1,6 +1,6 @@
 magic: 0xfeedface
-cputype: 18
-cpusubtype: 0
+cputype: 0x12
+cpusubtype: 0x0
 filetype: 2
 ncmds: 10
 sizeofcmds: 1484

diff --git a/yara-x/src/modules/macho/tests/testdata/macho_x86_64_dylib_file.out b/yara-x/src/modules/macho/tests/testdata/macho_x86_64_dylib_file.out
@@ -1,6 +1,6 @@
 magic: 0xcffaedfe
-cputype: 16777223
-cpusubtype: 3
+cputype: 0x1000007
+cpusubtype: 0x3
 filetype: 6
 ncmds: 13
 sizeofcmds: 744

diff --git a/yara-x/src/modules/macho/tests/testdata/macho_x86_file.out b/yara-x/src/modules/macho/tests/testdata/macho_x86_file.out
@@ -1,6 +1,6 @@
 magic: 0xcefaedfe
-cputype: 7
-cpusubtype: 3
+cputype: 0x7
+cpusubtype: 0x3
 filetype: 2
 ncmds: 17
 sizeofcmds: 1098

diff --git a/yara-x/src/modules/macho/tests/testdata/macho_x86_object_file.out b/yara-x/src/modules/macho/tests/testdata/macho_x86_object_file.out
@@ -1,6 +1,6 @@
 magic: 0xcefaedfe
-cputype: 7
-cpusubtype: 3
+cputype: 0x7
+cpusubtype: 0x3
 filetype: 1
 ncmds: 3
 sizeofcmds: 228

diff --git a/yara-x/src/modules/macho/tests/testdata/tiny_macho.out b/yara-x/src/modules/macho/tests/testdata/tiny_macho.out
@@ -1,6 +1,6 @@
 magic: 0xcefaedfe
-cputype: 7
-cpusubtype: 3
+cputype: 0x7
+cpusubtype: 0x3
 filetype: 2
 ncmds: 2
 sizeofcmds: 136

diff --git a/yara-x/src/modules/macho/tests/testdata/tiny_universal.out b/yara-x/src/modules/macho/tests/testdata/tiny_universal.out
@@ -1,22 +1,22 @@
 fat_magic: 0xcafebabe
 nfat_arch: 2
 fat_arch:
-  - cputype: 7
-    cpusubtype: 3
+  - cputype: 0x7
+    cpusubtype: 0x3
     offset: 4096
     size: 8512
     align: 12
     reserved: 0
-  - cputype: 16777223
-    cpusubtype: 2147483651
+  - cputype: 0x1000007
+    cpusubtype: 0x80000003
     offset: 16384
     size: 8544
     align: 12
     reserved: 0
 file:
   - magic: 0xcefaedfe
-    cputype: 7
-    cpusubtype: 3
+    cputype: 0x7
+    cpusubtype: 0x3
     filetype: 2
     ncmds: 16
     sizeofcmds: 1060
@@ -165,8 +165,8 @@ file:
         locreloff: 0
         nlocrel: 0
   - magic: 0xcffaedfe
-    cputype: 16777223
-    cpusubtype: 2147483651
+    cputype: 0x1000007
+    cpusubtype: 0x80000003
     filetype: 2
     ncmds: 16
     sizeofcmds: 1296

diff --git a/yara-x/src/modules/protos/macho.proto b/yara-x/src/modules/protos/macho.proto
@@ -67,8 +67,8 @@ message Segment {
 }
 
 message FatArch {
-  optional uint32 cputype = 1;
-  optional uint32 cpusubtype = 2;
+  optional uint32 cputype = 1 [(yaml.field).fmt = "x"];
+  optional uint32 cpusubtype = 2 [(yaml.field).fmt = "x"];
   optional uint64 offset = 3;
   optional uint64 size = 4;
   optional uint32 align = 5;
@@ -77,8 +77,8 @@ message FatArch {
 
 message File {
   optional uint32 magic = 1 [(yaml.field).fmt = "x"];
-  optional uint32 cputype = 2;
-  optional uint32 cpusubtype = 3;
+  optional uint32 cputype = 2 [(yaml.field).fmt = "x"];
+  optional uint32 cpusubtype = 3 [(yaml.field).fmt = "x"];
   optional uint32 filetype = 4;
   optional uint32 ncmds = 5;
   optional uint32 sizeofcmds = 6;
@@ -98,8 +98,8 @@ message File {
 message Macho {
   // Set Mach-O header and basic fields
   optional uint32 magic = 1 [(yaml.field).fmt = "x"];
-  optional uint32 cputype = 2;
-  optional uint32 cpusubtype = 3;
+  optional uint32 cputype = 2 [(yaml.field).fmt = "x"];
+  optional uint32 cpusubtype = 3 [(yaml.field).fmt = "x"];
   optional uint32 filetype = 4;
   optional uint32 ncmds = 5;
   optional uint32 sizeofcmds = 6;