Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

On Loki scan start, multiple unterminated regular expression messages occur #221

Open
g33k247 opened this issue Oct 13, 2022 · 4 comments
Open

Comments

@g33k247
Copy link

g33k247 commented Oct 13, 2022

Getting a bunch of these messages when starting a scan:

line 1126, in initialize_yara_rules yara.SyntaxError: line 22: unterminated regular expression

On Windows 11, executing from PowerShell. Once Loki gets past these issues, the scan continues and completes as expected.

@Neo23x0
Copy link
Owner

Neo23x0 commented Oct 13, 2022

The signatures seem to be okay. It's most likely an AV that deleted part of a signature set before the initialisation.

@g33k247
Copy link
Author

g33k247 commented Jun 8, 2023

Here's an example of the errors I'm seeing:

Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression
Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression
Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression
Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression
Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression
Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression
Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression
Traceback (most recent call last):
  File "\\vboxsvr\workspace\Loki\loki.py", line 1126, in initialize_yara_rules
yara.SyntaxError: line 22: unterminated regular expression

@Neo23x0
Copy link
Owner

Neo23x0 commented Jun 9, 2023

I cannot reproduce the error with the current version and the current rule set.

@Neo23x0
Copy link
Owner

Neo23x0 commented Jun 9, 2023

It's also a shit way to report errors not indicating the version number of the software, which OS, the command line, if customer rules are used etc.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants