Skip to content

Commit

Permalink
fix: add support for FAT Mach-O files in yr dump auto module selection
Browse files Browse the repository at this point in the history
  • Loading branch information
TommYDeeee committed Jan 31, 2024
1 parent fc17b62 commit 9a345c2
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion yara-x-cli/src/commands/dump.rs
Original file line number Diff line number Diff line change
Expand Up @@ -127,7 +127,9 @@ pub fn exec_dump(args: &ArgMatches) -> anyhow::Result<()> {
if !module_output.lnk.is_lnk() {
module_output.lnk = MessageField::none()
}
if !module_output.macho.has_magic() {
if !module_output.macho.has_magic()
&& !module_output.macho.has_fat_magic()
{
module_output.macho = MessageField::none()
}
if !module_output.pe.is_pe() {
Expand Down

0 comments on commit 9a345c2

Please sign in to comment.