Implement signature as an array.
Implement signature as an array.

Store the length of the array in a variable. This makes the following rule
run (though not work):

rule authenticode_array_test {
  condition:
    for any i in (0..pe.signature_length):
      (pe.signature[i].issuer == "/CN=Fedora Secure Boot CA")
}

When run against shim-0.2-3.2.fc18.x86_64.efi it does not find the second
certificate. Still need to debug why.

beikezcs/yara,bmagistro/yara,frbapolkosnik/yara,jshufelt/yara,kallanreed/yara,digideskio/yara,MeteorAdminz/yara,rednaga/yara,wxsBSD/yara,mgoffin/yara,plusvic/yara,digideskio/yara,jshufelt/yara,foreni-packages/yara,wxsBSD/yara,tanium/yara,jshufelt/yara,pombredanne/yara,VirusTotal/yara,tdr130/yara,beikezcs/yara,tanium/yara,smaudet/yara,cblichmann/yara,jpypi/yara,VirusTotal/yara,binsrc/yara,0x0mar/yara,pombredanne/yara,smaudet/yara,kallanreed/yara,rayyang2000/yara,frbapolkosnik/yara,tdr130/yara,binsrc/yara,wxsBSD/yara,rednaga/yara,plusvic/yara,neatsun/yara,hillu/yara,wxsBSD/yara,hillu/yara,smaudet/yara,mgoffin/yara,jshufelt/yara,hillu/yara,plusvic/yara,frbapolkosnik/yara,jpypi/yara,0x0mar/yara,tdr130/yara,beikezcs/yara,plusvic/yara,mgoffin/yara,0x0mar/yara,pombredanne/yara,bmagistro/yara,cblichmann/yara,bmagistro/yara,tanium/yara,digideskio/yara,smaudet/yara,rayyang2000/yara,wxsBSD/yara,VirusTotal/yara,binsrc/yara,kallanreed/yara,neatsun/yara,cblichmann/yara,hillu/yara,msuvajac/yara,cblichmann/yara,foreni-packages/yara,neatsun/yara,digideskio/yara,rednaga/yara,pombredanne/yara,msuvajac/yara,Security513/yara,Security513/yara,cblichmann/yara,VirusTotal/yara,msuvajac/yara,Security513/yara,rayyang2000/yara,VirusTotal/yara,hillu/yara,foreni-packages/yara,frbapolkosnik/yara,MeteorAdminz/yara,pombredanne/yara,binsrc/yara,plusvic/yara,mgoffin/yara,jpypi/yara,MeteorAdminz/yara,0x0mar/yara