From e2eeb003ea7f8af7d1c8f4f071efef6d6dda97fd Mon Sep 17 00:00:00 2001
From: jinbaibei30 <jinbaibei30@163.com>
Date: Thu, 23 Jan 2025 10:56:14 +0800
Subject: [PATCH] check bug yara file for 4.0 and 4.1

Signed-off-by: jinbaibei30 <jinbaibei30@163.com>
---
 checkforbug.yara | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 checkforbug.yara

diff --git a/checkforbug.yara b/checkforbug.yara
new file mode 100644
index 000000000..83d42168c
--- /dev/null
+++ b/checkforbug.yara
@@ -0,0 +1,14 @@
+rule Detect_Record_Too_Short_For_MAC
+{
+    meta:
+        author = "Your Name"
+        description = "Detects the presence of the string 'Record too short for MAC:'"
+        date = "2025-01-12"
+        version = "1.0"
+
+    strings:
+        $string1 = "Record too short for MAC:" nocase
+
+    condition:
+        $string1
+}
-- 
Gitee