RegEx search by hex code

[citro]

I am dealing with some binary files and I'm trying to search them using RegEx option.

In particular, I am searching for 0x00 (\x00) and 0x01 (\x01) char codes.

When I'm searching for \x00, I find nothing, but I also don't get the "Not found" alert box.

When I'm searching for \x01, I find lost of false positives (including 0x00s).

[MVV]

I think regex just thinks that \x00 is an empty search string.

For me, \x01 finds only zero bytes, no more false positives. It is an interesting thing that TC's regex finds \x00 when you type \x01! It looks like a way to find zero bytes, it even allows to find files that doesn't contain zero bytes!

[citro]

I think there is something wrong (a bug).

Searching 00 with "Search hex string" find all \x00 chars.

[white]

See http://ghisler.ch/board/viewtopic.php?p=206358#206358

[ghisler(Author)]

Sorry, this is a limitation of the used regex library. Searching for 00 characters is not reliable. The library is meant for finding text in text files.

[MarkFilipak]

Re: viewtopic.php?f=3&t=72997

Could you fix this, Christian? It appears that when '\x00' is in the pattern, the match is '\x00' plus the next byte. The search index is now off by 1 and the remainder of the pattern is not matched, even if it is there. This appears to happen only for '\x00' (and maybe only if it's the 1st byte but I don't have the source code and I don't have the patience to grope for more clues).

[Horst.Epp]

Re: viewtopic.php?f=3&t=72997

Could you fix this, Christian? It appears that when '\x00' is in the pattern, the match is '\x00' plus the next byte. The search index is now off by 1 and the remainder of the pattern is not matched, even if it is there. This appears to happen only for '\x00' (and maybe only if it's the 1st byte but I don't have the source code and I don't have the patience to grope for more clues).

I guess you are not running TC version 7.56 or 7.57
So hijacking an old thread make no sense for me.

[MarkFilipak]

Re: viewtopic.php?f=3&t=72997

Could you fix this, Christian? It appears that when '\x00' is in the pattern, the match is '\x00' plus the next byte. The search index is now off by 1 and the remainder of the pattern is not matched, even if it is there. This appears to happen only for '\x00' (and maybe only if it's the 1st byte but I don't have the source code and I don't have the patience to grope for more clues).

I guess you are not running TC version 7.56 or 7.57
So hijacking an old thread make no sense for me.

I'm running version 9.51. Does that really matter to you? It's still a problem. It's still the same problem.

[Horst.Epp]

Re: viewtopic.php?f=3&t=72997

Could you fix this, Christian? It appears that when '\x00' is in the pattern, the match is '\x00' plus the next byte. The search index is now off by 1 and the remainder of the pattern is not matched, even if it is there. This appears to happen only for '\x00' (and maybe only if it's the 1st byte but I don't have the source code and I don't have the patience to grope for more clues).

I guess you are not running TC version 7.56 or 7.57
So hijacking an old thread make no sense for me.

I'm running version 9.51. Does that really matter to you? It's still a problem. It's still the same problem.

It matters because I'm normaly not interested to read error reports for such old versions of TC

[MarkFilipak]

It matters because I'm normaly not interested to read error reports for such old versions of TC

But I'm not reporting a problem "for such old versions of TC". I'm reporting a problem for the current version.

If you think I should do something different, what is it?

[Horst.Epp]

It matters because I'm normaly not interested to read error reports for such old versions of TC

But I'm not reporting a problem "for such old versions of TC". I'm reporting a problem for the current version.

If you think I should do something different, what is it?

Look into the title of this Sub-Forum
It says TC7.56(a)/7.57 bug reports
There is a Forum for 9.5x bug reports.

[MarkFilipak]

It matters because I'm normaly not interested to read error reports for such old versions of TC

But I'm not reporting a problem "for such old versions of TC". I'm reporting a problem for the current version.

If you think I should do something different, what is it?

Look into the title of this Sub-Forum
It says TC7.56(a)/7.57 bug reports
There is a Forum for 9.5x bug reports.

Oh. Forgive me. I was given a link to this thread. I didn't know its sub-forum was limited in any way.