Skip to content

Releases: mandiant/GoReSym

v3.0.1

19 Oct 19:01
45d5c9d
Compare
Choose a tag to compare
  • Optimized regex scans to prevent extra matches. Behaves more like yara. #66

v3.0

19 Oct 18:50
Compare
Choose a tag to compare
  • Improves memory usage significantly by streaming pclntab candidates over a go channel. This prevents all the candidates from being held in memory. Using this generator pattern partially addresses the long time issue of OOM reported in #61
    • This comes at the expense of processing time as some operations are now repeated

v2.7.4

07 May 14:52
cc91ae7
Compare
Choose a tag to compare
  • Separates OS releases into different zip archives for easier automations

v2.7.3

15 Apr 14:02
7c37bd7
Compare
Choose a tag to compare
  • Print license information with new -about flag

v2.7.2

23 Feb 17:51
Compare
Choose a tag to compare
  • Fixes moduledata scan logic to ignore erroneous matches in subsequent scans for additional candidates.

v2.7.1

08 Feb 17:57
Compare
Choose a tag to compare
  • Add 1.22 support
  • Fix 1.21 moduledata
  • Merge upstream changes from buildinfo, objfile, debug packages

v2.6.4

28 Nov 19:44
Compare
Choose a tag to compare
  • Widens x64 assembly signature further to match in more cases

v2.6.3

10 Nov 16:41
Compare
Choose a tag to compare
  • Fixes regex scanning for x64

For patterns that used a needle at the end of the regex we did not properly adjust the match index to include the needle offset. This affected x64 signature scanning in particular.

v2.6.2

10 Oct 14:23
Compare
Choose a tag to compare
  • Fixes regex cache logic

v2.6.1

09 Oct 17:44
Compare
Choose a tag to compare
  • Add method name recovery
  • Fix section caching logic accidentally removed in v2.6 release
  • Cache regexes