meta->string deal my problem,thanks a lot! Wesley Shields <[email protected]> 于2021年5月24日周一 下午8:39写道：
> metas is a pointer to a YR_META structure ( > https://github.com/VirusTotal/yara/blob/master/libyara/include/yara/types.h#L225). > You can see how yara handles it when printing metadata about a rule here: > https://github.com/VirusTotal/yara/blob/master/cli/yara.c#L1004 > > -- WXS > > On May 22, 2021, at 4:51 AM, 95 Daoge <[email protected]> wrote: > > exampe: > rule test_file > { > meta: > author = "test" > description = "test mete display" > date = "20210522" > condition: > true > } > > use > yr_rule_metas_foreach(p, metas){ > printf("the message is :%s\n",metas->identifier); > } > i can only output :author descri and date but i want output > author = "test" > description = "test mete display" > date = "20210522" > > is this possible? > > > > -- > You received this message because you are subscribed to the Google Groups > "YARA" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/yara-project/000550e7-b234-45af-981f-0ab94464b4f8n%40googlegroups.com > <https://groups.google.com/d/msgid/yara-project/000550e7-b234-45af-981f-0ab94464b4f8n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > > -- > You received this message because you are subscribed to a topic in the > Google Groups "YARA" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/yara-project/Q4UDQZp4D2g/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/yara-project/AE4AD0BF-0223-48B8-AB72-5B0842956865%40atarininja.org > <https://groups.google.com/d/msgid/yara-project/AE4AD0BF-0223-48B8-AB72-5B0842956865%40atarininja.org?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/yara-project/CAEWAOdW5Vn4w80ZGn_T84ifD1n0%3DdZqFhgmEJG6otbnbqe8DOA%40mail.gmail.com.
