Skip to content

[pull] main from VirusTotal:main#122

Merged
pull[bot] merged 3 commits into
threatcode:mainfrom
VirusTotal:main
Feb 3, 2026
Merged

[pull] main from VirusTotal:main#122
pull[bot] merged 3 commits into
threatcode:mainfrom
VirusTotal:main

Conversation

@pull

@pull pull Bot commented Feb 3, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

latonis and others added 3 commits February 3, 2026 09:51
We needed to determine the proper size of the import entries by leveraging `imports_format`, which was not leveraged previously. This size and offset of the entry can be determined via https://github.com/llvm/llvm-project/blob/main/llvm/include/llvm/BinaryFormat/MachO.h#L1083-L1087.


```rust
            let entry_size = match header.imports_format {
                2 => 8,  // DYLD_CHAINED_IMPORT_ADDEND (u64)
                3 => 16, // DYLD_CHAINED_IMPORT_ADDEND64 (u128)
                _ => 4,  // Default u32
            };
```

Fixes #541
When some module is used in a rule without the corresponding `import` statement, the error message now contains a fix proposal that adds the statement at the beginning of the file.
In the language server, the quick fix that inserts the `import` statement when a module is used without being imported, was being applied at the wrong place in the source code because the span used for creating the fix was incorrect.
@pull pull Bot locked and limited conversation to collaborators Feb 3, 2026
@pull pull Bot added the ⤵️ pull label Feb 3, 2026
@pull pull Bot merged commit 43fdb4c into threatcode:main Feb 3, 2026
14 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants