14 Commits (2e55c901b1b0571a340602ee2681255876f63f1a)

Author	SHA1	Message	Date
micasnyd	140c88aa4e	Bump copyright for 2022 ... Includes minor format corrections.	4 years ago
Micah Snyder (micasnyd)	b9ca6ea103	Update copyright dates for 2021 ... Also fixes up clang-format.	5 years ago
Micah Snyder	e01ba94e36	bb12506: Fix phishing/heuristic alert verbosity ... Some detections, like phishing, are considered heuristic alerts because they match based on behavior more than on content. A subset of these are considered "potentially unwanted" (low-severity). These low-severity alerts include: - phishing - PDFs with obfuscated object names - bytecode signature alerts that start with "BC.Heuristics" The concept is that unless you enable "heuristic precedence" (a method of lowing the threshold to immediateley alert on low-severity detections), the scan should continue after a match in case a higher severity match is found. Only at the end will it print the low-severity match if nothing else was found. The current implementation is buggy though. Scanning of archives does not correctly bail out for the entire archive if one email contains a phishing link. Instead, it sets the "heuristic found" flag then and alerts for every subsequent file in the archive because it doesn't know if the heuristic was found in an embedded file or the target file. Because it's just a heuristic and the status is "clean", it keeps scanning. This patch corrects the behavior by checking if a low-severity alerts were found at the end of scanning the target file, instead of at the end of each embedded file. Additionally, this patch fixes an in issue with phishing alerts wherein heuristic precedence mode did not cause a scan to stop after the first alert. The above changes required restructuring to create an fmap inside of cl_scandesc_callback() so that scan_common() could be modified to require an fmap and set up so that the current *ctx->fmap pointer is never NULL when scan_common() evaluates match results. Also fixed a couple minor bugs in the phishing unit tests and cleaned up the test code for improved legitibility and type safety.	6 years ago
Micah Snyder	206dbaefe8	Update copyright dates for 2020	6 years ago
Micah Snyder	53e3045bf4	Return code checking corrections to regex suffix code.	6 years ago
Micah Snyder	5f4f69102d	Correcting types from int to cl_error_t where appropriate. Eliminating unused variables and referencing unused parameters to remove warnings.	6 years ago
Micah Snyder	52cddcbcfd	Updating and cleaning up copyright notices.	6 years ago
Micah Snyder	72fd33c8b2	clang-format'd using new .clang-format rules.	6 years ago
Mickey Sola	46a35abe56	mass update of copyright headers	10 years ago
Török Edvin	a497dce52d	fix compiler warnings ... constify git-svn: trunk@4019	18 years ago
Török Edvin	9ee053feab	handle multiple matches (bb #1110) ... update tests for regex, reenable test git-svn: trunk@4018	18 years ago
Török Edvin	3dcc2d784e	more tests for regex ... run unit-tests under valgrind if available. git-svn: trunk@3990	18 years ago
aCaB	de47223763	warn if no bzip2 support ... git-svn: trunk@3988	18 years ago
Török Edvin	5ee56e4103	split up regex_list. ... begin testing for regex_suffix git-svn: trunk@3985	18 years ago
Tomasz Kojm	2023340a41	update copyrights and stick more files to GPLv2; move and add more credits to the AUTHORS file; add COPYING.BSD ... git-svn: trunk@3749	18 years ago
Török Edvin	8ea27f5c18	fix some warnings ... git-svn: trunk@3275	18 years ago
Török Edvin	38a0019993	stick to GPLv2 ... git-svn: trunk@3121	19 years ago
Török Edvin	462e8e5eb3	apply next set of patches for enabling phishing code ... git-svn: trunk@3043	19 years ago
Török Edvin	293b4d909d	Remove cl_experimental wrapper for phishcheck, and entconv ... git-svn-id: file:///var/lib/svn/clamav-devel/branches/temp_dconf_phishenable@2980 77e5149b-7576-45b1-b177-96237e5ba77b	19 years ago
Török Edvin	43ecd9a14b	#include cleanup, Code cleanup, remove commented-out code, fix some gcc -W* warnings ... git-svn: trunk@2931	19 years ago
Sven Strickroth	a99111f050	remove old CVS-stuff and make the repository look more like SVN ... git-svn: trunk@2755	19 years ago
Tomasz Kojm	3da4dd4c77	make the experimental anti-phishing code more thread safe ... git-svn: trunk@2340	19 years ago
aCaB	bd912dd866	Phishing module merge - libclamav ... git-svn: trunk@2244	20 years ago
aCaB	7dec7955af	Initial merge of the phiscode... more to come. ... git-svn: trunk@2243	20 years ago
Tomasz Kojm	48b7b4a747	update GPL headers with new address for FSF ... git-svn: trunk@1901	20 years ago
Trog	680b819ec9	Add copyright notice. Fix metadata ref bug. ... git-svn: trunk@1484	21 years ago
Trog	513e1cddb4	First commit of new RAR3, RAR2 and RAR1 code. ... git-svn: trunk@1471	21 years ago