[Bug] Filtering in Pattern Data Not Working

[orbixio]

Operating System

Windows

What's the issue you encountered?

The filtering functionality in the Pattern Data view is experiencing several issues:

1. Case Sensitivity: There is no option for case-insensitive filtering. Searches are case-sensitive by default, limiting results when using different letter cases.

2. Value-Based Search Not Returning Results: When searching for specific values (e.g., DOS), no results are returned, even when the value exists in nested properties (e.g., peHeader.dosStub.message).

   Example:

   • Searching for DOS yields an empty result, despite it being present in peHeader.dosStub.message.
   • Screenshot:

3. Partial Header Search Limitation: Filtering by a header name doesn’t return matching results if the header name is only partially entered.

   Example:

   • Searching for pagesize returns empty results, even though ExtraPageSize is present.
   • Screenshot:

Expected Behavior:

1. Case-Insensitive Search: An option to toggle case sensitivity in the filtering settings.
2. Nested Value-Based Search: Filter should return results based on values within nested properties.
3. Partial Match Capability: Searching by partial header names should still match any headers containing the search string.

How can the issue be reproduced?

1. Create a Sample C Program: Create a simple hello_world.c file with the following content:

   #include <stdio.h>
   
   int main() {
       printf("Hello, World!\n");
       return 0;
   }

2. Compile the Program: Compile hello_world.c to ensure the binary is generated (use gcc or your preferred compiler).

3. Open the Compiled Binary: Open the generated binary in imhex.

4. Apply the Pattern: Load and apply the pattern file pe.hexpat.

5. Test the Filtering Functionality:

   • Search for the string DOS. The results should come back empty.
   • Search for a partial header name such as pagesize. The results should also be empty.
   • Try searching for different cases of sizeOfHeapCommit, such as SizeofheapCoMMit. Check if results are returned.

ImHex Version

1.35.4

ImHex Build Type

• Nightly or built from sources

Installation type

Portable

Additional context?