Guard Heuristics.PDF.ObfuscatedNameObject by CL_SCAN_ALGORITHMIC.

0.96
Török Edvin 15 years ago
parent 5b4b8ddff6
commit f14bf644de
  1. 10
      libclamav/pdf.c

@ -1074,10 +1074,12 @@ int cli_pdf(const char *dir, cli_ctx *ctx, off_t offset)
rc = CL_EUNPACK; rc = CL_EUNPACK;
} }
#endif #endif
if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) { if (ctx->options & CL_SCAN_ALGORITHMIC) {
/* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */ if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) {
*ctx->virname = "Heuristics.PDF.ObfuscatedNameObject"; /* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */
rc = CL_VIRUS; *ctx->virname = "Heuristics.PDF.ObfuscatedNameObject";
rc = CL_VIRUS;
}
} }
} }
cli_dbgmsg("cli_pdf: returning %d\n", rc); cli_dbgmsg("cli_pdf: returning %d\n", rc);

Loading…
Cancel
Save