yara 0.32.0

Rust bindings for VirusTotal/yara
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102

use std::io::{Read, Result, Write};

use yara_sys::{size_t, YR_STREAM};

pub struct ReadStream<'r> {
    reader: &'r mut dyn Read,
    result: Result<()>,
}

impl<'r> ReadStream<'r> {
    pub fn new(reader: &'r mut dyn Read) -> Self {
        Self {
            reader,
            result: Ok(()),
        }
    }

    pub fn as_yara(&mut self) -> YR_STREAM {
        YR_STREAM {
            user_data: self as *mut ReadStream as *mut std::os::raw::c_void,
            read: Some(stream_read_func),
            write: None,
        }
    }

    pub fn result(self) -> Result<()> {
        self.result
    }
}

pub struct WriteStream<'w> {
    writer: &'w mut dyn Write,
    result: Result<()>,
}

impl<'w> WriteStream<'w> {
    pub fn new(writer: &'w mut dyn Write) -> Self {
        Self {
            writer,
            result: Ok(()),
        }
    }

    pub fn as_yara(&mut self) -> YR_STREAM {
        YR_STREAM {
            user_data: self as *mut Self as *mut std::os::raw::c_void,
            read: None,
            write: Some(stream_write_func),
        }
    }

    pub fn result(self) -> Result<()> {
        self.result
    }
}

unsafe extern "C" fn stream_read_func(
    ptr: *mut ::std::os::raw::c_void,
    size: size_t,
    count: size_t,
    user_data: *mut ::std::os::raw::c_void,
) -> size_t {
    let this: &mut ReadStream = &mut *(user_data as *mut ReadStream);
    if this.result.is_err() {
        return 0;
    }

    let buffer = std::slice::from_raw_parts_mut(ptr as *mut u8, (size * count) as usize);
    let result = this.reader.read(buffer);

    match result {
        // FIXME: what if read_size is not a multiple of size ?
        Ok(read_size) => read_size as size_t / size,
        Err(e) => {
            this.result = Err(e);
            0
        }
    }
}

unsafe extern "C" fn stream_write_func(
    ptr: *const ::std::os::raw::c_void,
    size: size_t,
    count: size_t,
    user_data: *mut ::std::os::raw::c_void,
) -> size_t {
    let this: &mut WriteStream = &mut *(user_data as *mut WriteStream);
    if this.result.is_err() {
        return 0;
    }

    let buffer = std::slice::from_raw_parts(ptr as *const u8, (size * count) as usize);
    let result = this.writer.write_all(buffer);

    match result {
        Ok(()) => count,
        Err(e) => {
            this.result = Err(e);
            0
        }
    }
}