From afede0ff9c2bfe2667b4f070711ee826f3eb81b9 Mon Sep 17 00:00:00 2001
From: WerWolv <werwolv98@gmail.com>
Date: Sun, 25 Feb 2024 00:16:14 +0100
Subject: [PATCH] fix: Yara rule matching not working properly with non-zero
 base addresses

---
 plugins/yara_rules/source/content/yara_rule.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/yara_rules/source/content/yara_rule.cpp b/plugins/yara_rules/source/content/yara_rule.cpp
index cc08293d4..f6e64f950 100644
--- a/plugins/yara_rules/source/content/yara_rule.cpp
+++ b/plugins/yara_rules/source/content/yara_rule.cpp
@@ -182,7 +182,7 @@ namespace hex::plugin::yara {
 
             iterator->last_error      = ERROR_SUCCESS;
             context.currBlock.base    = address;
-            context.currBlock.size    = std::min<size_t>(context.region.size - address, 10_MiB);
+            context.currBlock.size    = std::min<size_t>(context.region.size - (address - context.region.address), 10_MiB);
             context.currBlock.context = &context;
 
             if (context.currBlock.size == 0) return nullptr;