{"action":"opened","issue":{"url":"https://api.github.com/repos/avast-tl/retdec/issues/162","repository_url":"https://api.github.com/repos/avast-tl/retdec","labels_url":"https://api.github.com/repos/avast-tl/retdec/issues/162/labels{/name}","comments_url":"https://api.github.com/repos/avast-tl/retdec/issues/162/comments","events_url":"https://api.github.com/repos/avast-tl/retdec/issues/162/events","html_url":"https://github.com/avast-tl/retdec/issues/162","id":294831078,"number":162,"title":"Signatures: search multiple paths, environment variable?","user":{"login":"dtzWill","id":817330,"avatar_url":"https://avatars2.githubusercontent.com/u/817330?v=4","gravatar_id":"","url":"https://api.github.com/users/dtzWill","html_url":"https://github.com/dtzWill","followers_url":"https://api.github.com/users/dtzWill/followers","following_url":"https://api.github.com/users/dtzWill/following{/other_user}","gists_url":"https://api.github.com/users/dtzWill/gists{/gist_id}","starred_url":"https://api.github.com/users/dtzWill/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dtzWill/subscriptions","organizations_url":"https://api.github.com/users/dtzWill/orgs","repos_url":"https://api.github.com/users/dtzWill/repos","events_url":"https://api.github.com/users/dtzWill/events{/privacy}","received_events_url":"https://api.github.com/users/dtzWill/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-06T16:46:28Z","updated_at":"2018-02-06T16:46:28Z","closed_at":null,"author_association":"NONE","body":"Packaging retdec currently requires bundling all signatures ~4GB unpacked, many of which a user may not want.  For example I personally don't have use for PE signatures, while naturally many people do.  They might not find my signatures useful. Or whatever. \n\nInstead of having retdec look to a fixed location (or require user intervention to specify an alternative path), could retdec support reading from multiple locations?\n\nThis way the same retdec binaries could be made to use any combination of signature collections-- making it natural to split the large database into optional components.\n\nThis also would make it easy for folks to convince retdec to use their additional signatures locally generated, allows updating signatures separately from retdec, and could be used for third-party signature collections (although hopefully for the most part everyone helps create a common collection).\n\nSearch path environment variable could be something like \"RETDEC_SIGNATURES_PATH\".\nBenefit of env var is that users don't have to invoke tools differently, setting variables is something a package manager could facilitate.\n\nThoughts? I haven't looked much at how signatures are searched/loaded, so one question I hope you can answer is if this is even possible/reasonable given the current notion of signatures.\n\nI'd be happy to help implement and test this if folks think this would be useful/a good idea."}}
{"actor":{"display_login":"dtzWill"}}