yara-x 1.15.0

A pure Rust implementation of YARA.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

use std::{fmt::Display, num::ParseIntError};

/// An enum for possible errors that might occur while calculating hash values.
#[derive(Debug)]
pub enum TlshError {
    /// Input's length is too big to handle. Maximal file size is 4GB.
    DataLenOverflow,
    /// The hash string is malformed and cannot be parsed.
    InvalidHashValue,
    /// TLSH requires an input of at least 50 bytes.
    MinSizeNotReached,
    /// Fails to parse a hex string to integer.
    ParseHexFailed,
    // No valid hash found. See https://github.com/trendmicro/tlsh/issues/79
    NoValidHash,
}

impl From<ParseIntError> for TlshError {
    fn from(_: ParseIntError) -> Self {
        Self::ParseHexFailed
    }
}

impl Display for TlshError {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        match self {
            TlshError::DataLenOverflow => {
                write!(f, "Input file is too big. Maximal file size is 4GB.")
            }
            TlshError::InvalidHashValue => write!(f, "Can't parse hash string"),
            TlshError::MinSizeNotReached => {
                write!(f, "TLSH requires an input of at least 50 bytes.")
            }
            TlshError::ParseHexFailed => write!(f, "Can't convert hex string to integer"),
            TlshError::NoValidHash => write!(
                f,
                "No valid hash could be computed. See https://github.com/trendmicro/tlsh/issues/79"
            ),
        }
    }
}