From f14bf644de8d90dd663fd020800755a45adf6f45 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?T=C3=B6r=C3=B6k=20Edvin?= Date: Mon, 2 Aug 2010 11:19:49 +0300 Subject: [PATCH] Guard Heuristics.PDF.ObfuscatedNameObject by CL_SCAN_ALGORITHMIC. --- libclamav/pdf.c | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/libclamav/pdf.c b/libclamav/pdf.c index b8667d687..ee8e12509 100644 --- a/libclamav/pdf.c +++ b/libclamav/pdf.c @@ -1074,10 +1074,12 @@ int cli_pdf(const char *dir, cli_ctx *ctx, off_t offset) rc = CL_EUNPACK; } #endif - if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) { - /* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */ - *ctx->virname = "Heuristics.PDF.ObfuscatedNameObject"; - rc = CL_VIRUS; + if (ctx->options & CL_SCAN_ALGORITHMIC) { + if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) { + /* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */ + *ctx->virname = "Heuristics.PDF.ObfuscatedNameObject"; + rc = CL_VIRUS; + } } } cli_dbgmsg("cli_pdf: returning %d\n", rc);