Update nursery/populate-syswhispers2-syscall-list.yml

Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
mandiant · Mar 24, 2024 · 393dbd9 · 393dbd9
1 parent a5874ac
commit 393dbd9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nursery/populate-syswhispers2-syscall-list.yml b/nursery/populate-syswhispers2-syscall-list.yml
@@ -28,7 +28,7 @@ rule:
             - operand[1].number: 0x6C64746E = "ldtn"
           - instruction:
             - mnemonic: cmp
-            - operand[1].number: 0x6C642E6C
+            - operand[1].number: 0x6C642E6C = "ld.l"
       - and:
         - description: check system call starting with 'Zw'
         - instruction: