56 Commits (2e55c901b1b0571a340602ee2681255876f63f1a)

Author	SHA1	Message	Date
micasnyd	140c88aa4e	Bump copyright for 2022 ... Includes minor format corrections.	4 years ago
Jonas Zaddach (jzaddach)	cd977727f0	Add LZMA & BZip2 decompression to bytecode API ... Adds LZMA and BZip2 decompression routines to the bytecode API. The ability to decompress LZMA and BZip2 streams is particularly useful for bytecode signatures that extend clamav executable unpacking capabilities. Of note, the LZMA format is not well standardized. This API expects the stream to start with the LZMA_Alone header. Also fixed a bug in LZMA dictionary size setting.	6 years ago
Micah Snyder	206dbaefe8	Update copyright dates for 2020	6 years ago
Micah Snyder (micasnyd)	9c58ba7bd7	Update to clamav-devel to synchronize with the clamav-bytecode-compiler project.	6 years ago
Micah Snyder	52cddcbcfd	Updating and cleaning up copyright notices.	6 years ago
Micah Snyder	b3e82e5e61	Replacing libclamav/cltypes.h with clamav-types.h.in, which generates a header clamav-types.h that we install alongside clamav.h.	6 years ago
Micah Snyder	d7979d4ff7	Restructured scan options flags from a single bitflag field to a structure containing multiple bitflag fields. This also required adding a new function to the bytecode API to get scan options a la carte, and modifying the existing function to hand back scan options in the old/deprecated uint32_t bitflag format. Re-generated bytecode iface header files. ... Updated libclamav documentation detailing new scan options structure. Renamed references to 'algorithmic' detection to 'heuristic' detection. Renaming references to 'properties' to 'collect metadata'. Renamed references to 'scan all' to 'scan all match'. Renamed a couple of 'Hueristic.*' signature names as 'Heuristics.*' signatures (plural) to match majority of other heuristics.	7 years ago
Mickey Sola	46a35abe56	mass update of copyright headers	10 years ago
Kevin Lin	0ff13b3138	clambc: added diagnostic tools for bytecode IR ... clambc: added option to print bytecode IR TODO: add diagnostic functions to win32 project Conflicts: shared/optparser.c	12 years ago
Kevin Lin	61e3637d08	bytecode api: added support for querying int and booleans from json properties	12 years ago
Kevin Lin	fa7ae4ccbc	bytecode api: updated copyright information ... bytecode api: added json properties reading implementation	12 years ago
Török Edvin	cc4d540831	bb #4324 ... memcpy() crashes because GCC sees 'struct cli_exe_section*' and assumes that section is aligned to at least 4 bytes. But it isn't, so change the parameter to just 'void*'. (Casting doesn't help, as GCC sees through it). Also fixes part 1 of bb #3789.	14 years ago
Török Edvin	f304dc688a	fmapify: fix const-ness warnings	14 years ago
Török Edvin	acc8bccb89	bb #2307.	15 years ago
Török Edvin	4116c65d1b	Add bytecode API to determine whether running under JIT.	15 years ago
Török Edvin	1dae00ebf4	bytecode: add icon match API.	16 years ago
Török Edvin	dc200c6b19	Add bytecode API for pdf.	16 years ago
Török Edvin	9f1715ccea	Add new bytecode APIs to access the environment. ... check_platform(...) is an API that can be used to: - blacklist JIT/bytecode on just a very specific platform (not recommended) - mask (with 0xf/0xff) some fields, and keep just the flags that uniquely identify the system where a bug occurs (for example linux + ppc32). - it returns a bool so you can do further checks if needed. The bytecode also has access to all the information collected from the environment, so it can make more detailed decisions (based on CPU, presence of SELinux/PaX, etc.). You can't introduce new detections via bytecode, but you can write new conditions using existing ones. The previously added builtin bytecode moved all the JIT disable logic to bytecode for easy updating.	16 years ago
Török Edvin	da91503d8e	Properly round ilog/iexp/...	16 years ago
Török Edvin	7a7365efe9	0.96.1 new APIs (cli_map etc.)	16 years ago
Török Edvin	1c4683acd1	add match_offsets support.	16 years ago
Török Edvin	b00a7cc8f8	jsnorm api.	16 years ago
Török Edvin	cfb0aef113	OP_BC_COPY again.	16 years ago
Török Edvin	02068643c1	Print location of runtime error.	16 years ago
Török Edvin	7b33a3661d	More API fixes.	16 years ago
Török Edvin	6ad39a4099	zlib/buffer apis.	16 years ago
Török Edvin	75e18b29c2	minimalistic zlib api.	16 years ago
Török Edvin	f6471bc9d6	More APIs.	16 years ago
Török Edvin	d9fbce26fc	More API additions for PDF.	16 years ago
Török Edvin	b56bea54d3	New API for buffer fill.	16 years ago
Török Edvin	236fb13647	New pointer handling rules.	16 years ago
Török Edvin	847d7fc1b8	2009->2010	16 years ago
Török Edvin	3f25b35db9	Fix duplicate const qualifier (bb #1798).	16 years ago
Török Edvin	2d45ef0616	Support for malloc in bytecode. Fix crash with mismatched api/flevel versions.	16 years ago
Török Edvin	565e677f95	file_find, file_byteat bytecode APIs.	16 years ago
Török Edvin	b31f2e7a2d	Fix loading of apicall8 (disasm). ... must alloc room for numop+2, must validate only first element of an array type (it doesn't have more!), regenerate _api_decl.c using ifacegen.	16 years ago
Török Edvin	f4e3421592	Support PE hook bytecodes triggered by logical signature.	16 years ago
Török Edvin	0fa95ef231	filesize, and pe_rawaddr API.	16 years ago
Török Edvin	688799d126	yc_bytecode is able to unpack a file now!	16 years ago
Török Edvin	65c740d7d8	Add support for tracing (if bytecode compiled with support). ... TODO: global id 0 is now a null pointer, need to adjust rest of conversion code accordingly.	16 years ago
Török Edvin	34da9ae405	change bytecode format to allow structs with more than 16 fields.	16 years ago
Török Edvin	75acf165c7	Sync headers with clamav bytecode compiler.	16 years ago
Török Edvin	b8656613c0	Doxygenize API headers.	16 years ago
Török Edvin	250d92c533	Sync with compiler.	16 years ago
Török Edvin	ec41017bba	WiP	16 years ago
Török Edvin	88815fd801	Sync with compiler.	16 years ago
Török Edvin	d38d6dadef	Logical signature hook for bytecode.	16 years ago
Török Edvin	52dd3a6bda	Initial support for loading .cbc files from DB.	16 years ago
Török Edvin	dcee45cce2	Update to latest bytecode format.	16 years ago
Török Edvin	7189addbde	WiP on debug APi.	17 years ago