Commit 2035c0921f68e28ee80097af3b472e17ff698a06

Authored by decalage2
1 parent 17d7c66c

mraptor: added ActiveX triggers GotFocus|LostFocus|MouseHover (issue #80)

Showing 1 changed file with 2 additions and 1 deletions
oletools/mraptor.py
@@ -89,12 +89,13 @@ MSG_ISSUES = 'Please report this issue on %s' % URL_ISSUES @@ -89,12 +89,13 @@ MSG_ISSUES = 'Please report this issue on %s' % URL_ISSUES
89 # 'NewDocument' 89 # 'NewDocument'
90 # 'Workbook_Open', 'Workbook_Close', 90 # 'Workbook_Open', 'Workbook_Close',
91 # *_Painted such as InkPicture1_Painted 91 # *_Painted such as InkPicture1_Painted
  92 +# *_GotFocus|LostFocus|MouseHover for other ActiveX objects
92 93
93 # TODO: check if line also contains Sub or Function 94 # TODO: check if line also contains Sub or Function
94 re_autoexec = re.compile(r'(?i)\b(?:Auto(?:Exec|_?Open|_?Close|Exit|New)' + 95 re_autoexec = re.compile(r'(?i)\b(?:Auto(?:Exec|_?Open|_?Close|Exit|New)' +
95 r'|Document(?:_?Open|_Close|_?BeforeClose|Change|_New)' + 96 r'|Document(?:_?Open|_Close|_?BeforeClose|Change|_New)' +
96 r'|NewDocument|Workbook(?:_Open|_Activate|_Close)' + 97 r'|NewDocument|Workbook(?:_Open|_Activate|_Close)' +
97 - r'|\w+_Painted)\b') 98 + r'|\w+_(?:Painted|GotFocus|LostFocus|MouseHover))\b')
98 99
99 # MS-VBAL 5.4.5.1 Open Statement: 100 # MS-VBAL 5.4.5.1 Open Statement:
100 RE_OPEN_WRITE = r'(?:\bOpen\b[^\n]+\b(?:Write|Append|Binary|Output|Random)\b)' 101 RE_OPEN_WRITE = r'(?:\bOpen\b[^\n]+\b(?:Write|Append|Binary|Output|Random)\b)'