From c10744e271a79cfb9c19666097872629f1095c60 Mon Sep 17 00:00:00 2001
From: isyaotian <isyaotian@163.com>
Date: Mon, 10 Apr 2023 09:04:31 +0000
Subject: [PATCH] add
 demo/sectest/static_patch_scan/2022-06/OpenHarmony-SA-2022-0603.yara.

Signed-off-by: isyaotian <isyaotian@163.com>
---
 .../2022-06/OpenHarmony-SA-2022-0603.yara     | 33 +++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 demo/sectest/static_patch_scan/2022-06/OpenHarmony-SA-2022-0603.yara

diff --git a/demo/sectest/static_patch_scan/2022-06/OpenHarmony-SA-2022-0603.yara b/demo/sectest/static_patch_scan/2022-06/OpenHarmony-SA-2022-0603.yara
new file mode 100644
index 000000000..85c8090de
--- /dev/null
+++ b/demo/sectest/static_patch_scan/2022-06/OpenHarmony-SA-2022-0603.yara
@@ -0,0 +1,33 @@
+ /* 
+ * Copyright (c) 2023 Huawei Device Co., Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import "console"
+import "elf"
+
+rule OpenHarmony_SA_2022_0603
+{
+    meta:
+    	date = "2023-04-10"
+    	openharmony_sa = "OpenHarmony-SA-2022-0603"
+    	affacted_files = "libupdateservice.z.so"	
+
+    strings:
+        $fix = "UpdateCallbackProxy WriteInterfaceToken fail"
+
+    condition:
+        (elf.machine == elf.EM_ARM) and ($fix) and console.log("penHarmony-SA-2022-0603 testcase pass")
+        
+}
-- 
GitLab