Guard Heuristics.PDF.ObfuscatedNameObject by CL_SCAN_ALGORITHMIC.

15 years ago · f14bf644de
parent 5b4b8ddff6
commit f14bf644de
1 changed files with 6 additions and 4 deletions
--- a/libclamav/pdf.c
+++ b/libclamav/pdf.c
@ -1074,12 +1074,14 @@ int cli_pdf(const char *dir, cli_ctx *ctx, off_t offset)
 	    rc = CL_EUNPACK;
 	}
 #endif
+	if (ctx->options & CL_SCAN_ALGORITHMIC) {
 	    if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) {
 		/* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */
 		*ctx->virname = "Heuristics.PDF.ObfuscatedNameObject";
 		rc = CL_VIRUS;
 	    }
 	}
+    }
    cli_dbgmsg("cli_pdf: returning %d\n", rc);
    free(pdf.objs);
    return rc;