From 4772cced116cf928c50ea58c4168a79b5b2f31ce Mon Sep 17 00:00:00 2001
From: Random9-BB <jinbaibei30@163.com>
Date: Sun, 12 Jan 2025 17:01:35 +0800
Subject: [PATCH] check bug fixed for release4.0 CVE-2023-43615

---
 detectfor4_0.yara | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 detectfor4_0.yara

diff --git a/detectfor4_0.yara b/detectfor4_0.yara
new file mode 100644
index 000000000..83d42168c
--- /dev/null
+++ b/detectfor4_0.yara
@@ -0,0 +1,14 @@
+rule Detect_Record_Too_Short_For_MAC
+{
+    meta:
+        author = "Your Name"
+        description = "Detects the presence of the string 'Record too short for MAC:'"
+        date = "2025-01-12"
+        version = "1.0"
+
+    strings:
+        $string1 = "Record too short for MAC:" nocase
+
+    condition:
+        $string1
+}
-- 
Gitee