====================================
Weird formatting (but valid yara) #1
====================================

rule 

        rulename :  

tag

 {
    strings                         : $str 
    =   
    "            a                 "



    condition                                 :
        
        
        true
}

---

(yara_file
    (rule
        (rule_head
            (identifier)
            (tag_list
                (tag
                    (identifier)
                )
            )
        )
        (rule_body
            (strings_list
                (string
                    (string_identifier)
                    (string_literal
                        (string_literal_str)
                    )
                )
            )
            (bool_literal)
        )
    )
)


====================================
Weird formatting (but valid yara) #2
====================================

rule rulename:tag{strings: $str="            a                 "condition:true}rule rulename2:tag{strings: $str="b"condition:true}

---

(yara_file
    (rule
        (rule_head
            (identifier)
            (tag_list
                (tag
                    (identifier)
                )
            )
        )
        (rule_body
            (strings_list
                (string
                    (string_identifier)
                    (string_literal
                        (string_literal_str)
                    )
                )
            )
            (bool_literal)
        )
    )
    (rule
        (rule_head
            (identifier)
            (tag_list
                (tag
                    (identifier)
                )
            )
        )
        (rule_body
            (strings_list
                (string
                    (string_identifier)
                    (string_literal
                        (string_literal_str)
                    )
                )
            )
            (bool_literal)
        )
    )
)


==================
Missing whitespace
==================

ruleabc {
    condition:
        true
}

---

(yara_file
    (ERROR
        (identifier)
        (bool_literal)
    )
)
