YARA-X 1.22.0

What's new in 1.22.0

• Add int64, int64be, uint64, and uint64be built-in functions, and support for unsigned 64-bit integers and integer literals greater than i64::MAX (#806).
• Add pe.offset_to_rva function to pe module to convert file offsets to RVAs (07f7a94).
• Keep the width and signedness of protobuf integer fields (#806).
• Implement constant folding for integer division and modulus operations (#806).
• Raise warnings on implicit sign conversions that change constant values and unary operations on unsigned integers (#806).
• Allow the yr dump command to show information from the zip module (3bbe876).
• Link compiler errors and warnings to their documentation pages (d34819c).
• Expose xor_key for matching patterns in the C and Go APIs (#814).
• Performance and memory consumption improvements (#808, #810, 9c2b3c7).
• Improve Language Server with Workspace Symbols support, better Code Completion documentation, auto-importing modules on non-top-level symbol completion, and --help/--version CLI flags (#788, #792, #795, #797, #798).
• Improve documentation for math.entropy function (#783).
• BUGFIX：Limit the size of emitted WASM functions and return error when a rule condition is too large (#813).
• BUGFIX：Don't force yara-x default features in yara-x-capi (#802).
• BUGFIX：Avoid WASM trap when dividing i64::MIN by -1 (7d16c1f).
• BUGFIX：Ensure quantifiers computed at runtime that are out of range are never satisfied (af690da).
• BUGFIX：Dix the number of iterations in loops over ranges when bounds overflow (697e36e).
• BUGFIX：Don't truncate 64-bit offsets and indexes on 32-bit platforms (9e00369).
• BUGFIX：Improve robustness of deserialized rule data validation (9d6a1d8).
• BUGFIX：Enhance C API robustness with comprehensive null checks and detailed error reporting (0ed7485).
• BUGFIX：Correct output line termination when progress bar is active in yr scan (029e9c9).

Contributors：@agreene0, @CfirTsabari, @chojuninengu, @prosperritty

Full release notes »