| line |
!l |
l&&!r |
l&&r |
condition |
|
387
|
242 |
0 |
1 |
$type eq 'meta' and not $_ =~ /^(?:include|indexes)$/ |
|
|
1 |
240 |
1 |
$type eq 'condition' and /^(?:include|ascii|condition|meta|nocase|fullword|strings|wide)$/ |
|
440
|
176 |
1236 |
170 |
$line and $line =~ /^(?:(global|private)\s+)?rule\s+([a-zA-Z0-9_]+)(?:\s*:\s*([^{]*))?\s*({.*})?/ |
|
494
|
0 |
0 |
0 |
$$self{'rules'}{$rule}{'tags'} and scalar $$self{'rules'}{$rule}{'tags'} > 0 |
|
523
|
686 |
1030 |
4 |
$$self{'include'} and /^include\s+"(.*?)"/ |
|
562
|
1792 |
28 |
6 |
$flag and $line =~ /^\s*(?:strings:|condition:)\s*$/ |
|
569
|
1792 |
12 |
16 |
$flag and $line =~ /^\s*(\S[^=\s]*)\s*=\s*(\S+.*)$/ |
|
603
|
956 |
632 |
122 |
$flag and $line =~ /^\s*(?:meta:|condition:)\s*$/ |
|
610
|
956 |
250 |
382 |
$flag and $line =~ m[^\s*(\$[a-zA-Z0-9_]*)\s*=\s*((?:"|/|{)\s*\S+.*(?:"|/|}))\s*(.*)$] |
|
664
|
1128 |
534 |
0 |
$flag and $line =~ /^\s*(?:meta:|strings:)\s*$/ |
|
671
|
1128 |
190 |
344 |
$flag and $line =~ /^\s*(\S+.*)$/ |
|
|
1318 |
170 |
174 |
$flag and $line =~ /^\s*(\S+.*)$/ and not $line =~ /^\s*({|})\s*$/ |
|
950
|
2 |
0 |
1 |
$str_name =~ /^\$+$/ and $$self{'rules'}{$rule_id}{'strings'}{$str_name}{'value'} eq $str_val |
|
1179
|
1 |
1 |
0 |
$position eq 'after' and $rule_pos > $relative_rule_pos |
|
|
1 |
1 |
0 |
$position eq 'before' and $rule_pos < $relative_rule_pos |