typo in upack checks

git-svn: trunk@3216
remotes/push_mirror/metadata
aCaB 18 years ago
parent 93b4a7b1a0
commit 5f7aa0c49f
  1. 3
      ChangeLog
  2. 8
      libclamav/pe.c

@ -1,3 +1,6 @@
Thu Sep 13 14:01:08 CEST 2007 (acab)
* libclamav/pe.c: One more typo fixed
Thu Sep 13 12:37:26 CEST 2007 (acab) Thu Sep 13 12:37:26 CEST 2007 (acab)
------------------------------------ ------------------------------------
* libclamav: Shut up a few warnings and fix some typoes * libclamav: Shut up a few warnings and fix some typoes

@ -1177,7 +1177,7 @@ int cli_scanpe(int desc, cli_ctx *ctx)
*/ */
/* upack 0.39-3s + sample 0151477*/ /* upack 0.39-3s + sample 0151477*/
while(((upack && nsections == 3) && /* 3 sections */ while(((upack && nsections == 3) && /* 3 sections */
( ((
epbuff[0] == '\xbe' && cli_readint32(epbuff + 1) - EC32(optional_hdr32.ImageBase) > min && /* mov esi */ epbuff[0] == '\xbe' && cli_readint32(epbuff + 1) - EC32(optional_hdr32.ImageBase) > min && /* mov esi */
epbuff[5] == '\xad' && epbuff[6] == '\x50' /* lodsd; push eax */ epbuff[5] == '\xad' && epbuff[6] == '\x50' /* lodsd; push eax */
) )
@ -1186,10 +1186,10 @@ int cli_scanpe(int desc, cli_ctx *ctx)
(epbuff[0] == '\xbe' && cli_readint32(epbuff + 1) - EC32(optional_hdr32.ImageBase) > min && /* mov esi */ (epbuff[0] == '\xbe' && cli_readint32(epbuff + 1) - EC32(optional_hdr32.ImageBase) > min && /* mov esi */
epbuff[5] == '\xff' && epbuff[6] == '\x36' /* push [esi] */ epbuff[5] == '\xff' && epbuff[6] == '\x36' /* push [esi] */
) )
) ))
|| ||
((!upack && nsections == 2) && /* 2 sections */ ((!upack && nsections == 2) && /* 2 sections */
( /* upack 0.39-2s */ (( /* upack 0.39-2s */
epbuff[0] == '\x60' && epbuff[1] == '\xe8' && cli_readint32(epbuff+2) == 0x9 /* pusha; call+9 */ epbuff[0] == '\x60' && epbuff[1] == '\xe8' && cli_readint32(epbuff+2) == 0x9 /* pusha; call+9 */
) )
|| ||
@ -1198,7 +1198,7 @@ int cli_scanpe(int desc, cli_ctx *ctx)
cli_readint32(epbuff + 1) - EC32(optional_hdr32.ImageBase) > 0 && cli_readint32(epbuff + 1) - EC32(optional_hdr32.ImageBase) > 0 &&
epbuff[5] == '\xad' && epbuff[6] == '\x8b' && epbuff[7] == '\xf8' /* loads; mov edi, eax */ epbuff[5] == '\xad' && epbuff[6] == '\x8b' && epbuff[7] == '\xf8' /* loads; mov edi, eax */
) )
) ))
) { ) {
uint32_t vma, off; uint32_t vma, off;
int a,b,c; int a,b,c;

Loading…
Cancel
Save