79 Commits (2c0fa85f2cabb42e37c24427c0016599341927c7)

Author	SHA1	Message	Date
Kevin Lin	2c0fa85f2c	bb#10363 - allowed for multiple filetypes for a single target	11 years ago
Steven Morgan	c1206103b1	bb#9595 fix for sigs targeted for ascii files containing offsets of the form EOF-n.	12 years ago
David Raynor	e37613ad27	libclamav: SHA1/SHA256 handling changes and wildcard-size support	12 years ago
David Raynor	703a9258ea	bb #6702: Add Java class type and target	12 years ago
David Raynor	9100c3a1ec	bb #6534: SWF signature category	13 years ago
David Raynor	85b7038857	bb#5356: Add PDF target	13 years ago
Tomasz Kojm	e067b3b45a	libclamav/matcher.c: add new offset modifier SEx (bb#4008)	14 years ago
Tomasz Kojm	b33354e55c	cosmetics (bb#2207)	14 years ago
aCaB	3faa97834c	new hash matching	15 years ago
aCaB	c802edd50e	add loadhash	15 years ago
Tomasz Kojm	b240ee01e3	libclamav: improve handling of HandlerType (bb#2298)	15 years ago
Tomasz Kojm	7770d314ff	libclamav: allow logical sigs to be used as file type sigs (bb#2228)	15 years ago
aCaB	2445be8c34	cli_lsig_eval use cached info	15 years ago
Tomasz Kojm	44712fcbe7	libclamav: reduce memory usage for MD5 sigs (bb#2057)	15 years ago
Tomasz Kojm	294558a535	libclamav: minimize header parsing (bb#2065)	15 years ago
Tomasz Kojm	ffa9b06093	sigtool: print match count and offsets in --test-sigs mode (bb#2054) ... IMPORTANT NOTE: --test-sigs now only works against the final target file (after all processing, normalization, etc. for which the tested signature was directly created)	15 years ago
Török Edvin	2545f9767c	Rearrange some fields in structs to avoid holes.	15 years ago
Tomasz Kojm	60dbee52c8	libclamav: make lsigs working in cli_scanscript() (bb#1998)	15 years ago
aCaB	548b55beb8	don't let scandesc rehash when we already have an hash	15 years ago
aCaB	32b1e04e64	simplify checkfp	16 years ago
Török Edvin	02eabc6d1e	Add the rest of the prefiltering glue code. ... This is still disabled for now (see the & 0).	16 years ago
Török Edvin	ab89360583	Support for macros in logical subsignatures (bb #164). ... In the LDB there is (one or more) special subsignature ${min-max}MACROID$, which means: must match any signature from group MACROID (for current filetype), and the match must occur at a distance of min-max from the start(!) of the previous logical subsignature match. It also has the sideeffect of making the previous subsignature considered a match only if both that and the macro matches. The offset of first match for the previous logical subsig will be the offset where the {min-max} distance is satisfied. The macro logical subsignature will have a count of 0 (if it didn't match together with the previous subsig), or a count of 1 if it did. The matches can occur anywhere (even in different ac scan buffers), since I don't call cli_ac_scanbuff I just use the offset of first match (which we have for the bytecode anyway). There can be at most 32 macro groups, signatures are added to a macro group by using $MACROID$ as offset. For example pdb entries could be converted to PDB:3:$0:<hexsig of domainname> if we assign macro id 0 to PDB (and we can assign 31 more macro ids to whatever). Example: test.ldb: TestMacro;Target:0;0&1;616161;${3-4}12$ test.ndb: D:0:$12:6262 D:0:$12:6363 D:0:$11:6262 test.dat: aaaaxccdd test-nomatch.dat: aaaaxxxccdd	16 years ago
aCaB	59098a112e	drop type-8 sigs (bb#895)	16 years ago
Török Edvin	57f14280a7	Fix use-after-free on bytecode load/execution. ... lsig->bc was referring to the bytecode directly (via a pointer), but the bytecode struct changes place in memory (it is realloced on each .cbc load). So use an index instead of the direct pointer.	16 years ago
Tomasz Kojm	570b1d0050	libclamav: cdb: drop FileType; cover ARJ, CAB, TAR, CPIO and 7Z	16 years ago
Tomasz Kojm	4168b01087	libclamav: allow lsigs be anchored to specific containers (bb#1293), eg. Container:CL_TYPE_ZIP	16 years ago
Tomasz Kojm	15f413d157	libclamav: handle zmd/rmd with cdb (bb#1579)	16 years ago
Tomasz Kojm	55094a9c76	libclamav: base code for unified container metadata matcher (bb#1579)	16 years ago
aCaB	d2ba6f98bb	matching complete	16 years ago
Tomasz Kojm	17cfd76f5b	libclamav: add support for FileSize, EntryPoint and NumberOfSections in lsig's tdb	16 years ago
Tomasz Kojm	0f7ba61742	libclamav: integrate ldb sigs with icon matcher	16 years ago
aCaB	49cc1e3c35	s/struct F_MAP/fmap_t/	16 years ago
Török Edvin	459b13ed89	Initial support for __match_count.	16 years ago
Tomasz Kojm	a6d4c62ee5	libclamav/matcher-ac.c: initial limited support for word boundary (bb#1631)	16 years ago
aCaB	048d76777f	scanners to fmap - hackish ... peheader to fmap lacks review + elf + macho	16 years ago
Tomasz Kojm	006f5fe642	libclamav: in bm_offmode only load sigs with non-floating absolute ... and relative offsets into BM matcher (load other ones into AC) and use per-file computed offset table to pick up best shifts (not enabled by default, bb#1300)	16 years ago
aCaB	cceea45822	cli_fmap_scandesc	16 years ago
Tomasz Kojm	aca9ea82df	libclamav: handle relative offsets with cli_ac_data; fix offset logic	16 years ago
Tomasz Kojm	33872a43de	libclamav: improve handling of signature offsets	16 years ago
aCaB	511c2e792c	cache ... cache over 256 trees	16 years ago
Tomasz Kojm	cc447ac82c	configure, libclamav: fix compile issues on IRIX (bb#1532)	16 years ago
Tomasz Kojm	8af7ccd0af	libclamav: handle Mach-O files with type-9 signatures; ... all special offsets are supported for PPC32/64 and x86 executables; for ARM and other archs only section based extensions (Sx[+-]n, SL[+-]n) are supported atm	16 years ago
Tomasz Kojm	e41019807c	libclamav: call cli_checkfp() whenever possible/makes sense (bb#1558) ... git-svn: trunk@5053	16 years ago
Tomasz Kojm	e06afe8e8e	libclamav: fix handling of signature offsets in cli_scanbuff() (bb#1546) ... git-svn: trunk@5026	16 years ago
Tomasz Kojm	0138619577	libclamav/matcher.c: cli_scanbuff: add support for external acdata ... git-svn: trunk@4781	17 years ago
Tomasz Kojm	47d40feb7a	libclamav: use LibTomMath by Tom St Denis instead of libgmp for multiple precision integer arithmetic (bb#1366) ... git-svn: trunk@4650	17 years ago
aCaB	e21657dfc9	a faster and more compact allocator ... git-svn-id: file:///var/lib/svn/clamav-devel/branches/mpool@4286 77e5149b-7576-45b1-b177-96237e5ba77b	17 years ago
aCaB	0d9dbdef21	some leaks fixed ... git-svn-id: file:///var/lib/svn/clamav-devel/branches/mpool@4280 77e5149b-7576-45b1-b177-96237e5ba77b	17 years ago
aCaB	a5746c2512	TODO: ... - make regex* and hash* behave properly (either include or exclude from the pool entirely) - cleanup the ifdefs and make a single macro - fixup the proto for dconf (re-enables make check in mpool-mode) - check the possibility to entirely wipe frees from error paths in mpool-mode (this totally simplifies the code) git-svn-id: file:///var/lib/svn/clamav-devel/branches/mpool@4271 77e5149b-7576-45b1-b177-96237e5ba77b	17 years ago
aCaB	885c2bf5b9	builds with and without mpools (#define USE_MPOOL) but it's still very broked ... git-svn-id: file:///var/lib/svn/clamav-devel/branches/mpool@4269 77e5149b-7576-45b1-b177-96237e5ba77b	17 years ago