NAME

YaraFFI::Record::YR_RULE - FFI Record for YARA rule structure

VERSION

Version 0.07

SYNOPSIS

use YaraFFI::Record::YR_RULE;

# In YARA callback, cast rule pointer to record
my $rule = $ffi->cast('opaque', 'record(YaraFFI::Record::YR_RULE)*', $rule_ptr);

# Access rule fields safely
my $name_ptr = $rule->identifier;
my $metas_ptr = $rule->metas;
my $strings_ptr = $rule->strings;

DESCRIPTION

Represents the YR_RULE structure from YARA's libyara. This is a partial definition focusing on commonly accessed fields. The actual YARA structure is larger and more complex.

STRUCTURE FIELDS

g_flags (sint32)

Global flags for the rule

t_flags (sint32)

Thread-specific flags

identifier (opaque)

Pointer to the rule name string

tags (opaque)

Pointer to tags array

metas (opaque)

Pointer to metadata array (YR_META structures)

strings (opaque)

Pointer to strings array (YR_STRING structures)

ns (opaque)

Pointer to namespace structure