./whitelists/custom.yar(12): error: syntax error, unexpected _IDENTIFIER_ about php-malware-finder

[jvoisin]

I can't reproduce here with the latest commit.
Maybe your version of yara is too old?

[lippoliv]

It is yara-3.4.0, I don't find any Requirements-File to read what version of yara you need!?

[mdeous]

There's no requirements file, the Yara version needed is in the README, but 3.4.0 is fine and should work. I'll investigate this.

[jvoisin]

Maybe you don't have the support for hashes in your version. Did you compile it yourself?

[lippoliv]

Just have a look in the Dockerfile, wich actually is nearly similar to an BASH script: https://lw-scm.de/lipperts-web/docker-pmf/blob/master/Dockerfile

wget https://github.com/plusvic/yara/archive/v3.4.0.zip
unzip v3.4.0.zip
cd /yara-3.4.0
./bootstrap.sh
./configure --with-crypto
make
make install

That is how I install yara. Is there an other way?

[jvoisin]

@mattoufoutu Any news about this?

[jvoisin]

@mattoufoutu ping :3

[mdeous]

I'll have a look at it ASAP, sorry. Le lun. 19 déc. 2016 15:46, jvoisin <[email protected]> a écrit :

…

@mattoufoutu <https://github.com/mattoufoutu> ping :3 — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <https://github.com/nbs-system/php-malware-finder/issues/36#issuecomment-267981333>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAX_zdTxEtU7DodooeRsMdLvitztWRSoks5rJpjLgaJpZM4KNiFi> .

[jvoisin]

It's ok, the problem will likely go away with newer versions of yara anyway ;)

[mdeous]

I just had a look, and indeed 6cf5148 has the reported behavior, but it no longer occurs in latest revisions.
@lippoliv can you confirm this is also fixed for you?