capa 0.3.21

File capability extractor.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

[package]
name = "capa"
version = "0.3.21"
description = "File capability extractor."
authors = ["Marirs <marirs@gmail.com>", "Andrey Mnatsakanov <andrey@3ig.kiev.ua>", "Jorge Alejandro Durán Royo<jorge.duran.royo@gmail.com>"]
keywords = ["capa", "fce", "capability", "aslr", "reverse"]
readme = "README.md"
license-file = "LICENSE"
repository = "https://github.com/marirs/capa-rs"
homepage = "https://github.com/marirs/capa-rs"
# Drop `examples` from `exclude` so the [[example]] target below ships
# with the crate (was inconsistent: example target referenced an
# excluded path). `data/` stays excluded — those are test fixtures.
exclude = ["data"]
edition = "2024"
# 0.3.21: bumped from 1.85 → 1.95 because smda 0.5.x sets MSRV 1.95
# (needed for some 2024-edition features it leans on). Pure-Rust dep
# tree below — no aws-lc / openssl / native-tls.
rust-version = "1.95"

[dependencies]
hex = "0.4.3"
itertools = "0.14.0"
pdb = "0.8.0"
petgraph = "0.8"
regex = "1.11.1"
fancy-regex = "0.18"
serde = { version = "1", features = ["derive"] }
# 0.3.21: smda 0.2 → 0.5 picks up months of security fixes + the new
# function-name pipeline (Go pclntab, MinGW DWARF, Delphi VMT, Rust
# demangling), structural function hashes, and Mach-O loader.
smda = "0.5"
thiserror = "2.0.12"
walkdir = "2.5.0"
yaml-rust = "0.4.5"
goblin = { version = "0.10.0", features = ["alloc"] }
maplit = "1.0.2"
# 0.3.21: dnfile 0.2 → 0.4 — zero-copy DnPe<'a>, resource module,
# AssemblyInfo helper, dndump / dnstrings CLIs, security fixes.
dnfile = "0.4"
lazy_static = "1.5.0"
parking_lot = "0.12.3"
serde_json = "1.0.140"
memoffset = "0.9.1"
memmap2 = "0.9.5"
scroll = "0.13"
once_cell = "1.21.1"
dynamic-loader-cache = "0.2.2"
# 0.3.21: ouroboros lets `Extractor` own both `buf: Vec<u8>` and a
# `DisassemblyReport<'_>` borrowing from it. Keeps the existing
# `Extractor::new(path, …)` public API working without exposing
# smda's `'a` lifetime to capa-rs callers. The full zero-copy refactor
# (caller owns the buffer) is deferred to 0.4.0.
ouroboros = "0.18"
# 0.3.21: iced-x86 is already in the transitive dep tree via smda.
# Pulling it in directly lets the smda extractor compare instructions
# against typed `Mnemonic` / `FlowControl` enums instead of re-formatting
# strings — the same hot-path perf win smda itself got from the iced
# decoder swap. Match the feature set smda uses to keep monomorphisation
# overhead identical.
iced-x86 = { version = "1", default-features = false, features = ["std", "decoder", "intel", "instr_info"] }

[dev-dependencies]
clap = { version = "4.5", features = ["cargo", "derive"] }

prettytable-rs = "0.10.0"

[lib]
name = "capa"
path = "src/lib.rs"

[features]
default = ["properties"]
verbose = []
properties = []

[[example]]
name = "capa_cli"
path = "examples/capa_cli.rs"
required-features = ["properties"]

[profile.dev]
opt-level = 3

[profile.release]
codegen-units = 1
debug-assertions = false
debug = false
opt-level = 3
lto = true