test: add test on widening empty regex node

vthib · Feb 12, 2023 · 6e893b6 · 6e893b6
1 parent 7062d55
commit 6e893b6
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/boreal/tests/it/variables.rs b/boreal/tests/it/variables.rs
@@ -160,6 +160,19 @@ fn to_wide(e: &[u8]) -> Vec<u8> {
 
 #[test]
 fn test_variable_regex_wide() {
+    // Without yara, it does not allow empty regex nodes
+    let checker = Checker::new_without_yara(
+        r#"
+        rule a {
+            strings:
+                $a = /()/ wide
+            condition:
+                $a
+        }"#,
+    );
+    checker.check(b"", false);
+    checker.check(b"\0", true);
+
     let checker = build_checker("abc", "wide");
     checker.check(b"abc", false);
     checker.check(b"a\0b\0c\0", true);