Actions
Feature #663
closedLuaJIT relative matches
Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:
Description
It would be very helpful to have relative matches for LuaJIT. The gmatch iterator in Lua seems rather slow, so it would be nice to have a "relative" modifier to the luajit keyword. One example might be multiple PDF objects that have been compressed using /FlateDecode. We may want to decompress content between stream and endstream. No reason to call this globally once and have lua iterate over the objects when we can do it in the rule lang.
Updated by Victor Julien almost 12 years ago
- Assignee changed from Victor Julien to OISF Dev
- Target version changed from 1.4 to TBD
Can you attach a test case? Pcap, rule and script?
Updated by Victor Julien over 11 years ago
- Status changed from New to Assigned
- Assignee changed from OISF Dev to Victor Julien
Updated by Victor Julien over 8 years ago
- Status changed from Assigned to Closed
- Assignee deleted (
Victor Julien) - Target version deleted (
TBD)
Lua scripts get an 'offset' argument that gives the position of the last match.
Actions