Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ida.plugin.capa.vm #1173

Closed
Ana06 opened this issue Nov 22, 2024 · 3 comments · Fixed by #1193
Closed

Update ida.plugin.capa.vm #1173

Ana06 opened this issue Nov 22, 2024 · 3 comments · Fixed by #1193
Assignees
Labels
👩‍🦱 IDA Related to IDA or an IDA plugin 🌀 FLARE-VM A package or feature to be used by FLARE-VM 💎 enhancement It is working, but it could be better 🏃 CI Related to CI

Comments

@Ana06
Copy link
Member

Ana06 commented Nov 22, 2024

Details

Our bot is not updating ida.plugin.capa.vm. I think we should:
1 - Update ida.plugin.capa.vm to the latest version (even if this need to be done manually as the current version does not work with IDA 9)
2 - Update update_package.py to update this package automatically in the future

@sara-rn would you like to work on this?

@Ana06 Ana06 added 💎 enhancement It is working, but it could be better 🏃 CI Related to CI 🌀 FLARE-VM A package or feature to be used by FLARE-VM 👩‍🦱 IDA Related to IDA or an IDA plugin labels Nov 22, 2024
@Ana06 Ana06 added this to the FLARE-VM 2024 Q4-P1 milestone Nov 22, 2024
@Ana06
Copy link
Member Author

Ana06 commented Dec 3, 2024

Step 1 above is not going to fix the issue as capa hasn't release the IDA 9 fix yet. We need to wait for a capa release (mandiant/capa#2497). @mandiant/capa-dev when can we expect a release?

In addition to the two steps, we need to set the version of flare-capa that we install in the package to ensure they are in sync. Setting the version and the fixing the automatic update can be done already and in independent PRs.

@Ana06
Copy link
Member Author

Ana06 commented Dec 3, 2024

@sara-rn and I have noticed that the script does not work because there are two hashes to update. This is a special case and we think it is not worth updating the script for this rare case.

Remaining in this issue is to set the version of flare-capa and update to capa 8 after it is released.

@Ana06
Copy link
Member Author

Ana06 commented Dec 10, 2024

capa 8.0.1 that fixes the issue has been released. @sara-rn does not have time this week for this, so I am taking over. 😉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
👩‍🦱 IDA Related to IDA or an IDA plugin 🌀 FLARE-VM A package or feature to be used by FLARE-VM 💎 enhancement It is working, but it could be better 🏃 CI Related to CI
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants