metas is a pointer to a YR_META structure (https://github.com/VirusTotal/yara/blob/master/libyara/include/yara/types.h#L225). You can see how yara handles it when printing metadata about a rule here: https://github.com/VirusTotal/yara/blob/master/cli/yara.c#L1004
-- WXS > On May 22, 2021, at 4:51 AM, 95 Daoge <fuwenb...@gmail.com> wrote: > > exampe: > rule test_file > { > meta: > author = "test" > description = "test mete display" > date = "20210522" > condition: > true > } > > use > yr_rule_metas_foreach(p, metas){ > printf("the message is :%s\n",metas->identifier); > } > i can only output :author descri and date but i want output > author = "test" > description = "test mete display" > date = "20210522" > > is this possible? > > > > -- > You received this message because you are subscribed to the Google Groups > "YARA" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to yara-project+unsubscr...@googlegroups.com > <mailto:yara-project+unsubscr...@googlegroups.com>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/yara-project/000550e7-b234-45af-981f-0ab94464b4f8n%40googlegroups.com > > <https://groups.google.com/d/msgid/yara-project/000550e7-b234-45af-981f-0ab94464b4f8n%40googlegroups.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to yara-project+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/yara-project/AE4AD0BF-0223-48B8-AB72-5B0842956865%40atarininja.org.