39 Commits (034cc770585228a2c51d59324826679ff89fa017)

Author	SHA1	Message	Date
Jonas Zaddach (jzaddach)	cd977727f0	Add LZMA & BZip2 decompression to bytecode API ... Adds LZMA and BZip2 decompression routines to the bytecode API. The ability to decompress LZMA and BZip2 streams is particularly useful for bytecode signatures that extend clamav executable unpacking capabilities. Of note, the LZMA format is not well standardized. This API expects the stream to start with the LZMA_Alone header. Also fixed a bug in LZMA dictionary size setting.	5 years ago
Micah Snyder	206dbaefe8	Update copyright dates for 2020	5 years ago
Micah Snyder	52cddcbcfd	Updating and cleaning up copyright notices.	6 years ago
Micah Snyder	d7979d4ff7	Restructured scan options flags from a single bitflag field to a structure containing multiple bitflag fields. This also required adding a new function to the bytecode API to get scan options a la carte, and modifying the existing function to hand back scan options in the old/deprecated uint32_t bitflag format. Re-generated bytecode iface header files. ... Updated libclamav documentation detailing new scan options structure. Renamed references to 'algorithmic' detection to 'heuristic' detection. Renaming references to 'properties' to 'collect metadata'. Renamed references to 'scan all' to 'scan all match'. Renamed a couple of 'Hueristic.*' signature names as 'Heuristics.*' signatures (plural) to match majority of other heuristics.	7 years ago
Mickey Sola	46a35abe56	mass update of copyright headers	10 years ago
Kevin Lin	61e3637d08	bytecode api: added support for querying int and booleans from json properties	11 years ago
Kevin Lin	fa7ae4ccbc	bytecode api: updated copyright information ... bytecode api: added json properties reading implementation	11 years ago
Török Edvin	cc4d540831	bb #4324 ... memcpy() crashes because GCC sees 'struct cli_exe_section*' and assumes that section is aligned to at least 4 bytes. But it isn't, so change the parameter to just 'void*'. (Casting doesn't help, as GCC sees through it). Also fixes part 1 of bb #3789.	13 years ago
Török Edvin	f304dc688a	fmapify: fix const-ness warnings	14 years ago
Török Edvin	acc8bccb89	bb #2307.	15 years ago
Török Edvin	4116c65d1b	Add bytecode API to determine whether running under JIT.	15 years ago
Török Edvin	1dae00ebf4	bytecode: add icon match API.	15 years ago
Török Edvin	dc200c6b19	Add bytecode API for pdf.	15 years ago
Török Edvin	9f1715ccea	Add new bytecode APIs to access the environment. ... check_platform(...) is an API that can be used to: - blacklist JIT/bytecode on just a very specific platform (not recommended) - mask (with 0xf/0xff) some fields, and keep just the flags that uniquely identify the system where a bug occurs (for example linux + ppc32). - it returns a bool so you can do further checks if needed. The bytecode also has access to all the information collected from the environment, so it can make more detailed decisions (based on CPU, presence of SELinux/PaX, etc.). You can't introduce new detections via bytecode, but you can write new conditions using existing ones. The previously added builtin bytecode moved all the JIT disable logic to bytecode for easy updating.	15 years ago
Török Edvin	da91503d8e	Properly round ilog/iexp/...	15 years ago
Török Edvin	7a7365efe9	0.96.1 new APIs (cli_map etc.)	15 years ago
Török Edvin	b00a7cc8f8	jsnorm api.	15 years ago
Török Edvin	02068643c1	Print location of runtime error.	15 years ago
Török Edvin	7b33a3661d	More API fixes.	15 years ago
Török Edvin	6ad39a4099	zlib/buffer apis.	15 years ago
Török Edvin	75e18b29c2	minimalistic zlib api.	15 years ago
Török Edvin	f6471bc9d6	More APIs.	15 years ago
Török Edvin	d9fbce26fc	More API additions for PDF.	15 years ago
Török Edvin	b56bea54d3	New API for buffer fill.	15 years ago
Török Edvin	236fb13647	New pointer handling rules.	15 years ago
Török Edvin	847d7fc1b8	2009->2010	16 years ago
Török Edvin	3f25b35db9	Fix duplicate const qualifier (bb #1798).	16 years ago
Török Edvin	2d45ef0616	Support for malloc in bytecode. Fix crash with mismatched api/flevel versions.	16 years ago
Török Edvin	565e677f95	file_find, file_byteat bytecode APIs.	16 years ago
Török Edvin	0fa95ef231	filesize, and pe_rawaddr API.	16 years ago
Török Edvin	688799d126	yc_bytecode is able to unpack a file now!	16 years ago
Török Edvin	65c740d7d8	Add support for tracing (if bytecode compiled with support). ... TODO: global id 0 is now a null pointer, need to adjust rest of conversion code accordingly.	16 years ago
Török Edvin	75acf165c7	Sync headers with clamav bytecode compiler.	16 years ago
Török Edvin	250d92c533	Sync with compiler.	16 years ago
Török Edvin	88815fd801	Sync with compiler.	16 years ago
Török Edvin	d38d6dadef	Logical signature hook for bytecode.	16 years ago
Török Edvin	dcee45cce2	Update to latest bytecode format.	16 years ago
Török Edvin	7189addbde	WiP on debug APi.	16 years ago
Török Edvin	0f505d61f8	Add missing file.	16 years ago
aCaB	9a4da6afb7	ishiled full fmap - pt 2	16 years ago
aCaB	56e5821b49	initial IS overlay parser	16 years ago
aCaB	a4b30692f8	properly pack the structs	16 years ago
aCaB	7ebede9b3c	ishield-msi complete	16 years ago