5670 Commits (37002feeeeed2dbbb46a9b6ec656a861eb2ab06a)

 

All Branches   

Search

Author	SHA1	Message	Date
Török Edvin	40103a3004	Merge branch 'tmp' into prefiltering2 ... * tmp: Prepare for prefiltering: add new files. Conflicts: libclamav/Makefile.am libclamav/Makefile.in libclamav/libclamav.map libclamav/regex_list.c	16 years ago
Török Edvin	e0ac80ab38	Prepare for prefiltering: add new files. ... Move SO_search to filtering.c as filtering_search. Add unit test.	16 years ago
Török Edvin	ada793857b	Update unit tests after Phishing.Heuristics -> Heuristics.Phishing change.	16 years ago
Tomasz Kojm	4a01b4efe9	libclamav: prefix all engine detections with "Heuristics." (bb#1808) ... (also change Phishing.Heuristics.* -> Heuristics.Phishing.*)	16 years ago
Török Edvin	3000f7bfab	distcheck	16 years ago
Török Edvin	ab89360583	Support for macros in logical subsignatures (bb #164). ... In the LDB there is (one or more) special subsignature ${min-max}MACROID$, which means: must match any signature from group MACROID (for current filetype), and the match must occur at a distance of min-max from the start(!) of the previous logical subsignature match. It also has the sideeffect of making the previous subsignature considered a match only if both that and the macro matches. The offset of first match for the previous logical subsig will be the offset where the {min-max} distance is satisfied. The macro logical subsignature will have a count of 0 (if it didn't match together with the previous subsig), or a count of 1 if it did. The matches can occur anywhere (even in different ac scan buffers), since I don't call cli_ac_scanbuff I just use the offset of first match (which we have for the bytecode anyway). There can be at most 32 macro groups, signatures are added to a macro group by using $MACROID$ as offset. For example pdb entries could be converted to PDB:3:$0:<hexsig of domainname> if we assign macro id 0 to PDB (and we can assign 31 more macro ids to whatever). Example: test.ldb: TestMacro;Target:0;0&1;616161;${3-4}12$ test.ndb: D:0:$12:6262 D:0:$12:6363 D:0:$11:6262 test.dat: aaaaxccdd test-nomatch.dat: aaaaxxxccdd	16 years ago
Török Edvin	9bdaf35dea	print bytecode source code.	16 years ago
aCaB	59098a112e	drop type-8 sigs (bb#895)	16 years ago
Tomasz Kojm	0d71b6f11b	freshclam, sigtool: use zlib's Z_FILTERED strategy ... Thanks to Edwin	16 years ago
aCaB	88ce192ef5	bb#1812	16 years ago
aCaB	af0297c78e	Merge branch 'master' of git.clam.sourcefire.com:/var/lib/git/clamav-devel	16 years ago
aCaB	e8f6878cd7	bb#1789 - final	16 years ago
aCaB	e394c51305	bb#1789 - part two	16 years ago
Tomasz Kojm	8770404a47	clamscan: properly report errors from libclamav; simplify error codes	16 years ago
aCaB	cf5fc21912	fchxxx won't work on a socket	16 years ago
aCaB	ab56ca922e	bb#1789 - part one	16 years ago
Tomasz Kojm	dd5092ff73	clamdscan: fix error logic once again	16 years ago
aCaB	0678c04bf5	win32 readme + contrib cleanup	16 years ago
aCaB	48d39e496d	shared/cdiff: use binary mode	16 years ago
aCaB	bb459c8d07	fix previous	16 years ago
aCaB	64927c5dac	win32 fixes	16 years ago
Tomasz Kojm	e293229df0	don't count lsig associated with bc	16 years ago
Török Edvin	57f14280a7	Fix use-after-free on bytecode load/execution. ... lsig->bc was referring to the bytecode directly (via a pointer), but the bytecode struct changes place in memory (it is realloced on each .cbc load). So use an index instead of the direct pointer.	16 years ago
Tomasz Kojm	d32e0d9423	freshclam: new option Bytecode	16 years ago
Török Edvin	847d7fc1b8	2009->2010	16 years ago
Török Edvin	57bbb2eb14	Fix loading of multiple .cbc files. ... Common function prototypes must be added only once per Module, otherwise LLVM autorenames them, and we get llvm.bswap.i326 instead of llvm.bswap.i32, which is of course not valid and the verifier rejects.	16 years ago
Török Edvin	c1aff5ec76	fix loading from .cvd. ... Chomp first line too, and look for \0 instead of \n.	16 years ago
Török Edvin	f6e8bb802a	fix segfault on failed cbc load. ... The bytecode struct might be only partially initialized. Account for that.	16 years ago
Tomasz Kojm	e3fecc08c0	fix infloop	16 years ago
Tomasz Kojm	490d6c4168	sigtool: add support for bytecode.cvd	16 years ago
Török Edvin	ee406a2d1e	increase clamdtop timeout (bb #1732).	16 years ago
Török Edvin	1514794c49	make STATS a non-bulk command (bb #1732). ... This is needed to allow clamdtop to watch in realtime what is happening in clamd, otherwise STATS would always lag behind 50 other multiscan commands.	16 years ago
Török Edvin	6a5ec1f967	Don't allow bulk requests (multiscan, idsession) to fill more than 50% of the queue. (bb #1732) ... This makes clamd responsive to simple (version,contscan,etc.) requests even during multiscan. Previously these would get stuck behind a ~100 item queue, and the 1:4 ratio of executing these commands wasn't working, since the commands weren't in the queue in the first place.	16 years ago
aCaB	b545addb04	win32: fix net event handler	16 years ago
aCaB	80dea05931	clamdscan-win32	16 years ago
aCaB	e4bf8f9455	fix concurrency issue	16 years ago
Török Edvin	cf3dc57d17	fix ETIMEDOUT mismatch on win32. ... Must include pthread.h in w32_errno.h. ETIMEDOUT is not defined in any win32 system header! So everybody defines it as they like, pthreads defines it to 10060, we define it to 1110 (unless already defined). So just include pthread.h to make sure we agree on its value. Otherwise clamd will just infloop instead of timing out idle threads. Also update project include paths so every proj can find pthread.h	16 years ago
aCaB	3d7d59c104	clamd-win32 - works!	16 years ago
aCaB	288b945f57	clamd-win32 - where is my mind?	16 years ago
aCaB	80f4bd69c2	fix accept	16 years ago
aCaB	4155214d9a	fix accept	16 years ago
aCaB	cd8fd1be27	fix conflicts	16 years ago
aCaB	5eca45b5e7	clamd-win32 - WIP#3	16 years ago
Török Edvin	d29df4cf2d	Don't use clamdscan.map, it fails on some versions of Solaris. ... On Solaris with GNU ld 2.17, a program which does a simple malloc(56) dumps core if that linker map is used (which only exports main). So just don't use that linker map for clamdscan at all.	16 years ago
Török Edvin	16a94a51ce	fix inverted message	16 years ago
Török Edvin	4311fe44d5	reverse this condition.	16 years ago
aCaB	1c4d9a22fa	clamd-win32: WIP#2	16 years ago
Török Edvin	fdb7b9e926	Print feature summary after configure is finished.	16 years ago
Török Edvin	de7968234e	distcheck	16 years ago
Török Edvin	4e1ff79bea	Test field offset rather than size. ... Just because fields are packed, doesn't mean the struct doesn't have padding.	16 years ago