blob: 31d271b643342ddf162d6ffb40735cf616590b83 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
/* Chrysalide - Outil d'analyse de fichiers binaires
* hyperscan-int.h - prototypes internes pour la méthode de recherche basée sur la bibliothèque Hyperscan d'Intel
*
* Copyright (C) 2024 Cyrille Bagard
*
* This file is part of Chrysalide.
*
* Chrysalide is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* Chrysalide is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with Foobar. If not, see <http://www.gnu.org/licenses/>.
*/
#ifndef _ANALYSIS_SCAN_PATTERNS_BACKENDS_HYPERSCAN_INT_H
#define _ANALYSIS_SCAN_PATTERNS_BACKENDS_HYPERSCAN_INT_H
#include "hyperscan.h"
#include "../backend-int.h"
#define EXPR_COVERAGE_START 0
#define EXPR_COVERAGE_COUNT 1
#define EXPR_COVERAGE_END 1
/* Méthode de recherche basée sur une bibliothèque d'Intel : Hyperscan (instance) */
struct _GHyperscanBackend
{
GEngineBackend parent; /* A laisser en premier */
const uint8_t **atoms; /* Motif remarquable */
size_t *lengths; /* Nombre d'octets considérés */
uint32_t *coverages; /* Départ et quantité de suivis*/
size_t allocated; /* Nombre d'éléments alloués */
size_t used; /* Nombre d'éléments utiles */
unsigned int *lit_ids; /* Identifiants internes */
hs_database_t *database; /* Compilation d'éléments */
hs_scratch_t *scratch; /* Espace de travail */
};
/* Méthode de recherche basée sur une bibliothèque d'Intel : Hyperscan (classe) */
struct _GHyperscanBackendClass
{
GEngineBackendClass parent; /* A laisser en premier */
};
#endif /* _ANALYSIS_SCAN_PATTERNS_BACKENDS_HYPERSCAN_INT_H */
|