From 6e893b6dd6eb8305cd96f020fa6ccf3516a9929e Mon Sep 17 00:00:00 2001
From: Vincent Thiberville <vthib@pm.me>
Date: Sun, 12 Feb 2023 15:48:24 +0100
Subject: [PATCH] test: add test on widening empty regex node

---
 boreal/tests/it/variables.rs | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/boreal/tests/it/variables.rs b/boreal/tests/it/variables.rs
index 142a7502..ab8d87da 100644
--- a/boreal/tests/it/variables.rs
+++ b/boreal/tests/it/variables.rs
@@ -160,6 +160,19 @@ fn to_wide(e: &[u8]) -> Vec<u8> {
 
 #[test]
 fn test_variable_regex_wide() {
+    // Without yara, it does not allow empty regex nodes
+    let checker = Checker::new_without_yara(
+        r#"
+        rule a {
+            strings:
+                $a = /()/ wide
+            condition:
+                $a
+        }"#,
+    );
+    checker.check(b"", false);
+    checker.check(b"\0", true);
+
     let checker = build_checker("abc", "wide");
     checker.check(b"abc", false);
     checker.check(b"a\0b\0c\0", true);