diff --git a/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205 b/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205.yara similarity index 96% rename from demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205 rename to demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205.yara index 7013b6442f80ae7bb5abfc718be96d27c997a83e..cd54092d1330a88cd0d06285124f415408972da9 100644 --- a/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205 +++ b/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205.yara @@ -1,37 +1,37 @@ -/* - * Copyright (c) 2023 Huawei Device Co., Ltd. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - */ - -import "console" -import "elf" - -rule OpenHarmony_SA_2022_1205 -{ - meta: - date = "2023-01-10" - openharmony_sa = "OpenHarmony-SA-2022-1205" - cve = "CVE-2022-44455" - severity = "medium" - affacted_files = "appspawn" - affected_func = "CheckAppProperty" - - strings: - $features = "process name error" nocase wide ascii - $features1 = "process name length is 0" nocase wide ascii - - condition: - (elf.machine == elf.EM_ARM) and ($features and not $features1) and console.log("OpenHarmony-SA-2022-1205 testcase pass") - +/* + * Copyright (c) 2023 Huawei Device Co., Ltd. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +import "console" +import "elf" + +rule OpenHarmony_SA_2022_1205 +{ + meta: + date = "2023-01-10" + openharmony_sa = "OpenHarmony-SA-2022-1205" + cve = "CVE-2022-44455" + severity = "medium" + affacted_files = "appspawn" + affected_func = "CheckAppProperty" + + strings: + $features = "process name error" nocase wide ascii + $features1 = "process name length is 0" nocase wide ascii + + condition: + (elf.machine == elf.EM_ARM) and ($features and not $features1) and console.log("OpenHarmony-SA-2022-1205 testcase pass") + } \ No newline at end of file