-
-
Notifications
You must be signed in to change notification settings - Fork 113
/
error.go
186 lines (178 loc) · 9.6 KB
/
error.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
// Copyright © 2015-2020 Hilko Bengen <[email protected]>
// All rights reserved.
//
// Use of this source code is governed by the license that can be
// found in the LICENSE file.
package yara
// #include <yara.h>
import "C"
import (
"fmt"
)
// Error encapsulates the C API error codes.
type Error struct {
// YARA error code.
Code int
// Namespace in which the error occurred, if applicable. It can be empty.
Namespace string
// Rule in which the error occurred, if applicable. It can be empty.
RuleIdentifier string
// String in which the error occurred, if applicable. It can be empty.
StringIdentifier string
}
func (e Error) Error() (errorString string) {
if e.Namespace != "" && e.RuleIdentifier != "" {
errorString = fmt.Sprintf("%s caused by rule \"%s:%s\"",
errorCodeToString(e.Code), e.Namespace, e.RuleIdentifier)
if e.StringIdentifier != "" {
errorString += fmt.Sprintf(" string %s", e.StringIdentifier)
}
} else {
errorString = errorCodeToString(e.Code)
}
return errorString
}
func errorCodeToString(errorCode int) string {
if str, ok := errorStrings[errorCode]; ok {
return str
}
return fmt.Sprintf("unknown error %d", errorCode)
}
func newError(code C.int) error {
if code == C.ERROR_SUCCESS {
return nil
}
return Error{Code: int(code)}
}
const (
ERROR_SUCCESS = C.ERROR_SUCCESS
ERROR_INSUFFICIENT_MEMORY = C.ERROR_INSUFFICIENT_MEMORY
ERROR_COULD_NOT_ATTACH_TO_PROCESS = C.ERROR_COULD_NOT_ATTACH_TO_PROCESS
ERROR_COULD_NOT_OPEN_FILE = C.ERROR_COULD_NOT_OPEN_FILE
ERROR_COULD_NOT_MAP_FILE = C.ERROR_COULD_NOT_MAP_FILE
ERROR_INVALID_FILE = C.ERROR_INVALID_FILE
ERROR_CORRUPT_FILE = C.ERROR_CORRUPT_FILE
ERROR_UNSUPPORTED_FILE_VERSION = C.ERROR_UNSUPPORTED_FILE_VERSION
ERROR_INVALID_REGULAR_EXPRESSION = C.ERROR_INVALID_REGULAR_EXPRESSION
ERROR_INVALID_HEX_STRING = C.ERROR_INVALID_HEX_STRING
ERROR_SYNTAX_ERROR = C.ERROR_SYNTAX_ERROR
ERROR_LOOP_NESTING_LIMIT_EXCEEDED = C.ERROR_LOOP_NESTING_LIMIT_EXCEEDED
ERROR_DUPLICATED_LOOP_IDENTIFIER = C.ERROR_DUPLICATED_LOOP_IDENTIFIER
ERROR_DUPLICATED_IDENTIFIER = C.ERROR_DUPLICATED_IDENTIFIER
ERROR_DUPLICATED_TAG_IDENTIFIER = C.ERROR_DUPLICATED_TAG_IDENTIFIER
ERROR_DUPLICATED_META_IDENTIFIER = C.ERROR_DUPLICATED_META_IDENTIFIER
ERROR_DUPLICATED_STRING_IDENTIFIER = C.ERROR_DUPLICATED_STRING_IDENTIFIER
ERROR_UNREFERENCED_STRING = C.ERROR_UNREFERENCED_STRING
ERROR_UNDEFINED_STRING = C.ERROR_UNDEFINED_STRING
ERROR_UNDEFINED_IDENTIFIER = C.ERROR_UNDEFINED_IDENTIFIER
ERROR_MISPLACED_ANONYMOUS_STRING = C.ERROR_MISPLACED_ANONYMOUS_STRING
ERROR_INCLUDES_CIRCULAR_REFERENCE = C.ERROR_INCLUDES_CIRCULAR_REFERENCE
ERROR_INCLUDE_DEPTH_EXCEEDED = C.ERROR_INCLUDE_DEPTH_EXCEEDED
ERROR_WRONG_TYPE = C.ERROR_WRONG_TYPE
ERROR_EXEC_STACK_OVERFLOW = C.ERROR_EXEC_STACK_OVERFLOW
ERROR_SCAN_TIMEOUT = C.ERROR_SCAN_TIMEOUT
ERROR_TOO_MANY_SCAN_THREADS = C.ERROR_TOO_MANY_SCAN_THREADS
ERROR_CALLBACK_ERROR = C.ERROR_CALLBACK_ERROR
ERROR_INVALID_ARGUMENT = C.ERROR_INVALID_ARGUMENT
ERROR_TOO_MANY_MATCHES = C.ERROR_TOO_MANY_MATCHES
ERROR_INTERNAL_FATAL_ERROR = C.ERROR_INTERNAL_FATAL_ERROR
ERROR_NESTED_FOR_OF_LOOP = C.ERROR_NESTED_FOR_OF_LOOP
ERROR_INVALID_FIELD_NAME = C.ERROR_INVALID_FIELD_NAME
ERROR_UNKNOWN_MODULE = C.ERROR_UNKNOWN_MODULE
ERROR_NOT_A_STRUCTURE = C.ERROR_NOT_A_STRUCTURE
ERROR_NOT_INDEXABLE = C.ERROR_NOT_INDEXABLE
ERROR_NOT_A_FUNCTION = C.ERROR_NOT_A_FUNCTION
ERROR_INVALID_FORMAT = C.ERROR_INVALID_FORMAT
ERROR_TOO_MANY_ARGUMENTS = C.ERROR_TOO_MANY_ARGUMENTS
ERROR_WRONG_ARGUMENTS = C.ERROR_WRONG_ARGUMENTS
ERROR_WRONG_RETURN_TYPE = C.ERROR_WRONG_RETURN_TYPE
ERROR_DUPLICATED_STRUCTURE_MEMBER = C.ERROR_DUPLICATED_STRUCTURE_MEMBER
ERROR_EMPTY_STRING = C.ERROR_EMPTY_STRING
ERROR_DIVISION_BY_ZERO = C.ERROR_DIVISION_BY_ZERO
ERROR_REGULAR_EXPRESSION_TOO_LARGE = C.ERROR_REGULAR_EXPRESSION_TOO_LARGE
ERROR_TOO_MANY_RE_FIBERS = C.ERROR_TOO_MANY_RE_FIBERS
ERROR_COULD_NOT_READ_PROCESS_MEMORY = C.ERROR_COULD_NOT_READ_PROCESS_MEMORY
ERROR_INVALID_EXTERNAL_VARIABLE_TYPE = C.ERROR_INVALID_EXTERNAL_VARIABLE_TYPE
ERROR_REGULAR_EXPRESSION_TOO_COMPLEX = C.ERROR_REGULAR_EXPRESSION_TOO_COMPLEX
ERROR_INVALID_MODULE_NAME = C.ERROR_INVALID_MODULE_NAME
ERROR_TOO_MANY_STRINGS = C.ERROR_TOO_MANY_STRINGS
ERROR_INTEGER_OVERFLOW = C.ERROR_INTEGER_OVERFLOW
ERROR_CALLBACK_REQUIRED = C.ERROR_CALLBACK_REQUIRED
ERROR_INVALID_OPERAND = C.ERROR_INVALID_OPERAND
ERROR_COULD_NOT_READ_FILE = C.ERROR_COULD_NOT_READ_FILE
ERROR_DUPLICATED_EXTERNAL_VARIABLE = C.ERROR_DUPLICATED_EXTERNAL_VARIABLE
ERROR_INVALID_MODULE_DATA = C.ERROR_INVALID_MODULE_DATA
ERROR_WRITING_FILE = C.ERROR_WRITING_FILE
ERROR_INVALID_MODIFIER = C.ERROR_INVALID_MODIFIER
ERROR_DUPLICATED_MODIFIER = C.ERROR_DUPLICATED_MODIFIER
ERROR_BLOCK_NOT_READY = C.ERROR_BLOCK_NOT_READY
ERROR_INVALID_PERCENTAGE = C.ERROR_INVALID_PERCENTAGE
ERROR_IDENTIFIER_MATCHES_WILDCARD = C.ERROR_IDENTIFIER_MATCHES_WILDCARD
ERROR_INVALID_VALUE = C.ERROR_INVALID_VALUE
)
// FIXME: This should be generated from yara/error.h
var errorStrings = map[int]string{
C.ERROR_INSUFICIENT_MEMORY: "insufficient memory",
C.ERROR_COULD_NOT_ATTACH_TO_PROCESS: "could not attach to process",
C.ERROR_COULD_NOT_OPEN_FILE: "could not open file",
C.ERROR_COULD_NOT_MAP_FILE: "could not map file",
C.ERROR_INVALID_FILE: "invalid file",
C.ERROR_CORRUPT_FILE: "corrupt file",
C.ERROR_UNSUPPORTED_FILE_VERSION: "unsupported file version",
C.ERROR_INVALID_REGULAR_EXPRESSION: "invalid regular expression",
C.ERROR_INVALID_HEX_STRING: "invalid hex string",
C.ERROR_SYNTAX_ERROR: "syntax error",
C.ERROR_LOOP_NESTING_LIMIT_EXCEEDED: "loop nesting limit exceeded",
C.ERROR_DUPLICATED_LOOP_IDENTIFIER: "duplicated loop identifier",
C.ERROR_DUPLICATED_IDENTIFIER: "duplicated identifier",
C.ERROR_DUPLICATED_TAG_IDENTIFIER: "duplicated tag identifier",
C.ERROR_DUPLICATED_META_IDENTIFIER: "duplicated meta identifier",
C.ERROR_DUPLICATED_STRING_IDENTIFIER: "duplicated string identifier",
C.ERROR_UNREFERENCED_STRING: "unreferenced string",
C.ERROR_UNDEFINED_STRING: "undefined string",
C.ERROR_UNDEFINED_IDENTIFIER: "undefined identifier",
C.ERROR_MISPLACED_ANONYMOUS_STRING: "misplaced anonymous string",
C.ERROR_INCLUDES_CIRCULAR_REFERENCE: "includes circular reference",
C.ERROR_INCLUDE_DEPTH_EXCEEDED: "include depth exceeded",
C.ERROR_WRONG_TYPE: "wrong type",
C.ERROR_EXEC_STACK_OVERFLOW: "exec stack overflow",
C.ERROR_SCAN_TIMEOUT: "scan timeout",
C.ERROR_TOO_MANY_SCAN_THREADS: "too many scan threads",
C.ERROR_CALLBACK_ERROR: "callback error",
C.ERROR_INVALID_ARGUMENT: "invalid argument",
C.ERROR_TOO_MANY_MATCHES: "too many matches",
C.ERROR_INTERNAL_FATAL_ERROR: "internal fatal error",
C.ERROR_NESTED_FOR_OF_LOOP: "nested for of loop",
C.ERROR_INVALID_FIELD_NAME: "invalid field name",
C.ERROR_UNKNOWN_MODULE: "unknown module",
C.ERROR_NOT_A_STRUCTURE: "not a structure",
C.ERROR_NOT_INDEXABLE: "not indexable",
C.ERROR_NOT_A_FUNCTION: "not a function",
C.ERROR_INVALID_FORMAT: "invalid format",
C.ERROR_TOO_MANY_ARGUMENTS: "too many arguments",
C.ERROR_WRONG_ARGUMENTS: "wrong arguments",
C.ERROR_WRONG_RETURN_TYPE: "wrong return type",
C.ERROR_DUPLICATED_STRUCTURE_MEMBER: "duplicated structure member",
C.ERROR_EMPTY_STRING: "empty string",
C.ERROR_DIVISION_BY_ZERO: "division by zero",
C.ERROR_REGULAR_EXPRESSION_TOO_LARGE: "regular expression too large",
C.ERROR_TOO_MANY_RE_FIBERS: "too many regular expression fibers",
C.ERROR_COULD_NOT_READ_PROCESS_MEMORY: "could not read process memory",
C.ERROR_INVALID_EXTERNAL_VARIABLE_TYPE: "invalid external variable type",
C.ERROR_REGULAR_EXPRESSION_TOO_COMPLEX: "regular expression too complex",
C.ERROR_INVALID_MODULE_NAME: "invalid module name",
C.ERROR_TOO_MANY_STRINGS: "too many strings",
C.ERROR_INTEGER_OVERFLOW: "integer overflow",
C.ERROR_CALLBACK_REQUIRED: "callback required",
C.ERROR_INVALID_OPERAND: "invalid operand",
C.ERROR_COULD_NOT_READ_FILE: "could not read file",
C.ERROR_DUPLICATED_EXTERNAL_VARIABLE: "duplicated external variable",
C.ERROR_INVALID_MODULE_DATA: "invalid module data",
C.ERROR_WRITING_FILE: "error writing file",
C.ERROR_INVALID_MODIFIER: "invalid modifier",
C.ERROR_DUPLICATED_MODIFIER: "duplicated modifier",
C.ERROR_BLOCK_NOT_READY: "block not ready",
C.ERROR_INVALID_PERCENTAGE: "invalid percentage",
C.ERROR_IDENTIFIER_MATCHES_WILDCARD: "identifier matches wildcard",
C.ERROR_INVALID_VALUE: "invalid value",
}