clamav

Commit Graph

Author	SHA1	Message	Date
micasnyd	140c88aa4e	Bump copyright for 2022 Includes minor format corrections.	4 years ago
Micah Snyder (micasnyd)	b9ca6ea103	Update copyright dates for 2021 Also fixes up clang-format.	5 years ago
Micah Snyder	860764eb16	Heuristic macro detection for imp VBA extraction Notably the commit adds a heuristic alert when VBA is extracted using the new VBA extraction code and similarly adds "HasMacros":true to the JSON scan properties. In addition, a change was added to the cli_sanitize_filepath() function so it converts posix pathseps to Windows pathseps on Windows and also outputs a sanitized basename pointer (optional) which is used when generating a temporary filename so that using a prefix with pathseps in it won't cause file creation failures (observed with --leave-temps where original filenames are incorporated into temporarily filenames). Included soem error handling improvements for cli_vba_scandir() to better track alert and macro detections. Downgraded utf8 conversion error messages to debug messages because they are too verbose in files with invalid filenames (observed in some malware). Changed the xlm macro and vba project temp filenames to include "xlm_macros" and "vba_project" prefix, to make it easier to find them. Relocated XLM and VBA temp files from the top-level tmp directory to the current sub_tmpdir, so tempfiles for a given scan are more organized.	5 years ago
Micah Snyder	e2f59af30a	Clang-format touchup	5 years ago
Jonas Zaddach (jzaddach)	b7f8440965	Modernize VBA code extraction from Microsoft Office files - Existing VBA extraction code uses undocumented cache structures. This code uses the documented way of accessing VBA projects. - Adds additional detail to the dumped information: Project name, Project doc string, ... All VBA projects are dumped into a single file. - Malware authors are currently evading detection by spreading malicious code over several projects. It is hard to write signatures if only part of the malicious code is visible.	6 years ago
Micah Snyder	206dbaefe8	Update copyright dates for 2020	6 years ago
Micah Snyder	4524c398f3	Argument and return types for fmap_readn(), cli_writen(), cli_readn() converted to use size_t instead of int.	6 years ago
Micah Snyder	50f178dc63	fuzz - 12166 - Fix for 4-byte out of bounds write wherein the an invalid struct pointer member variable is set to zero. The fix adds bounds checking to the Uniq storage 'add' function as well as error code checks. Included a lot of new inline documentation.	6 years ago
Micah Snyder	52cddcbcfd	Updating and cleaning up copyright notices.	6 years ago
Micah Snyder	b3e82e5e61	Replacing libclamav/cltypes.h with clamav-types.h.in, which generates a header clamav-types.h that we install alongside clamav.h.	6 years ago
Micah Snyder	72fd33c8b2	clang-format'd using new .clang-format rules.	6 years ago
Mickey Sola	46a35abe56	mass update of copyright headers	10 years ago
Kevin Lin	4c37996842	doc/ppt: moved information stream parsing from vba source to ole2 source	12 years ago
Kevin Lin	09dddc5be3	doc/ppt: added SummaryInfo and DocumentSummary streams parsing, JSON or debug	12 years ago
Tomasz Kojm	33068e0973	libclamav: drop cl_settempdir(); use cl_engine_set() with CL_ENGINE_TMPDIR and CL_ENGINE_KEEPTMP instead git-svn: trunk@4416	17 years ago
aCaB	937ade082c	fix collisions in ole2/vba git-svn: trunk@4068	18 years ago
Tomasz Kojm	72ce4b70eb	improve handling of PDF, CAB, RTF, OLE2 and HTML files (sync with branch/0.93) git-svn: trunk@3862	18 years ago
Tomasz Kojm	2023340a41	update copyrights and stick more files to GPLv2; move and add more credits to the AUTHORS file; add COPYING.BSD git-svn: trunk@3749	18 years ago
aCaB	b5231f5f67	realign structs see bb#474 git-svn: trunk@3537	18 years ago
Nigel Horne	332987babf	Change copyright git-svn: trunk@3449	18 years ago
Nigel Horne	11d24f8a8f	Code cleanup git-svn: trunk@3432	18 years ago
Nigel Horne	9fe789f8b8	Many changes since 0.92 git-svn: trunk@3407	18 years ago
Sven Strickroth	a99111f050	remove old CVS-stuff and make the repository look more like SVN git-svn: trunk@2755	19 years ago
Tomasz Kojm	48b7b4a747	update GPL headers with new address for FSF git-svn: trunk@1901	20 years ago
Trog	892d2f56d6	Decode and scan OLE objects embedded in MS Office documents. git-svn: trunk@1480	21 years ago
Trog	92cf99f340	Add PowerPoint endian conversion and small fixes. Export interface, ready to go. git-svn: trunk@583	22 years ago
Trog	7b9aed8c1e	Word6 macro extraction code (not yet activated) git-svn: trunk@525	22 years ago
Trog	ea399527a9	vba_decompress returns explicit data length git-svn: trunk@314	22 years ago
Tomasz Kojm	6d6e82711c	Support for clamav-config.h git-svn: trunk@246	22 years ago
Tomasz Kojm	f893c0f351	OLE2 fixes git-svn: trunk@204	22 years ago
Tomasz Kojm	47bbbc5644	OLE2 git-svn: trunk@200	22 years ago
Tomasz Kojm	d9e258d5fb	Missing files added. git-svn: trunk@77	23 years ago
Tomasz Kojm	8139fd99cb	New code added. git-svn: trunk@64	23 years ago
Luca Gibelli	e3aaff8e10	Initial revision git-svn: trunk@7	23 years ago

23 Commits (2e55c901b1b0571a340602ee2681255876f63f1a)