Merge pull request #441 from azurda/fix_plugin_virus

fix signatures/wndows/virus.py infinite loop
CAPESandbox · Jul 25, 2024 · 2243332 · 2243332
2 parents 22e5b71 + 730333e
commit 2243332
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/modules/signatures/windows/virus.py b/modules/signatures/windows/virus.py
@@ -96,8 +96,10 @@ def on_call(self, call, process):
             if handle in self.handles:
                 key = self.handles[handle]
                 if key in self.copydests:
-                    while key in self.readcopyfiles:
+                    key_max_depth = 3
+                    while key_max_depth and key in self.readcopyfiles:
                         key = self.readcopyfiles[key]
+                        key_max_depth -= 1
                 self.infected_files.add(key)
                 self.saw_virus = True
                 if self.pid: