rickwang
757ffbbfb3
fix failure of large file detection on 32-bit platforms
...
With FILE_OFFSET_BITS=64, st_size is 8-byte.
In this case, casting st_size to size_t, which is 4-byte on 32-bit machine,
will make the comparison go wrong.
Signed-off-by: rickwang <rickwang@synology.com>
6 years ago
Micah Snyder
817a919d65
Autojunk'ed
6 years ago
Micah Snyder
a30884058c
oss-fuzz-issue-2317: changing LIB_FUZZING_ENGINE to LIB_FUZZING_ENGINE_DEPRECATED as temporary fix.
6 years ago
Micah Snyder (micasnyd)
0f128f20b8
bb12250 & bb12277: Fixes for sigtools vba scanner. Scanner engine, scan options, and context creation routines were incomplete.
6 years ago
Mickey Sola
ad0ef25d9b
fuzz - 12513 - fixing aspack single byte heap overread
6 years ago
Micah Snyder
fe4433b01f
Autojunk'd
6 years ago
Micah Snyder
155eaaad8b
bb12284 - Fix to prevent path traversal when using cli_genfname() to generate filenames that may retain path and filename information. Changed scanrar so that it will no longer retain path information for extracted files.
6 years ago
Micah Snyder
a8ca96687a
Clean up of PDF object finding logic. Changes include recording object sizes as objects are found, identifying object streams in the object parsing section instead of the PDF parsing section, and limiting of stream and other object parsing to the size of the object instead of the size of the PDF. It is also easier to read and includes more inline documentation.
6 years ago
Micah Snyder
5e3b1c62ba
bb12262 - Fix to address potential use-after-free bug in scanner code relating to the filenames for nested files.
6 years ago
Micah Snyder
25d72538cd
fuzz - 12181 - Fixed 1-byte buffer over-read in PDF parser.
6 years ago
Micah Snyder
1e50361baf
fuzz - 12168 - Fix for 1 byte out of bounds read in PDF parser. Fix includes a check to ensure that it is safe to index -1 from the start of an object a well as additional checks to invalidate some negative integer values.
6 years ago
Micah Snyder
50f178dc63
fuzz - 12166 - Fix for 4-byte out of bounds write wherein the an invalid struct pointer member variable is set to zero. The fix adds bounds checking to the Uniq storage 'add' function as well as error code checks. Included a lot of new inline documentation.
6 years ago
Micah Snyder
da15bcfd37
fuzz - 12149 - Fix for out of bounds read in PDF object stream parsing code.
6 years ago
Micah Snyder
479a9a235a
Fixes for issues identified by coverity.
6 years ago
Jonas Zaddach
3fc316c0c4
Trace instructions in bytecode VM
6 years ago
Micah Snyder
262edbc886
bb12186 - Fix to prevent possible crash when loading ldb database and PCRE is not available. Patch courtest of Tomasz Kojm.
6 years ago
chips
8a5f206964
Update sigtool.c
...
fix bug: fd open but no close,it makes handle is occupied
6 years ago
Micah Snyder
403f04b097
fuzz - 12124 - Added missing hash cleanup checks in Xz decoder.
6 years ago
Micah Snyder
c9c924a294
fuzz - 12178 - Correction to LZW inflate algorithm where left-shift of a larger value would have have been too large for signed long.
6 years ago
Micah Snyder
8a4669be47
fuzz - 12156 - Explicit cast to unsigned 32bit int because a signed int could not hold 0xffff << 16 bits.
6 years ago
Micah Snyder
20dfea9d98
fuzz - 12142 - Fix for potential memory and file descriptor leak in HTML normalization code.
6 years ago
Micah Snyder
c500b68021
fuzz - 12133 - Fix for memory leak in ARJ decoder failure condition.
6 years ago
Micah Snyder
da8d941cc8
fuzz - 12131, 12132, 12205 - Speed up PDF parse speed for truncated (or otherwise malformed) PDFs.
6 years ago
Micah Snyder
098d2adb09
fuzz - 12122 - Fix to memory leak by properly free'ing the dirname variable in OLE2 parser.
6 years ago
Mickey Sola
d86e0a3be7
fuzz - 12528 - fixing left shift issue with OLE2 and utf16 to ascii decoding
6 years ago
Mickey Sola
a478126302
fuzz - 12306 - ARJ decode left shift and int storage checks added
6 years ago
Mickey Sola
1feebda93b
fuzz - 12260 - fixing undefined shift issue when handling javascript escape sequences during hex to int conversion
6 years ago
Mickey Sola
9d283802bb
fuzz - 12183, 12311 - fixing screnc base64 undefined leftshifts, correcting types, and placing checks to fix int storage size issues with HTML normalizer
6 years ago
Mickey Sola
0cff42fbc3
fuzz - 12251, 12194 - fixing left shifting issue with upx decoding when determining back offsets
6 years ago
Micah Snyder
dc34ec9194
Compatibility fix with std < C99.
6 years ago
Jonas Zaddach
d1f7ff12a3
Prettify printing of bytecode arguments
6 years ago
Jonas Zaddach
44f77de889
Dump IR of all functions in clambc
6 years ago
Mickey Sola
393edc437d
automake'd
6 years ago
Mickey Sola
b8f60910fa
autotools - forcing distcheck to respect the c and c++ compilers specified at configure time
6 years ago
Micah Snyder
8e765853d0
Updating generated yara_grammar and yara_lexer files. Including modification to yara_grammar.y to include yara_compiler.h in both the .h and .c file, as previously it was manually added to the .h file which causes build failures if you don't realize this and need to recompile the yacc file.
6 years ago
Micah Snyder
ea722d9486
Autojunk'd
6 years ago
Micah Snyder
43062b1397
Makefile changes to fix distcheck after addition of fuzz directory.
6 years ago
Micah Snyder
b8dbe267cf
Corrections to dist to account for moving of UserManual and addition of fuzz directory.
6 years ago
Micah Snyder
bbe70a1b9a
Moved the UserManual markdown content to the Cisco-Talos clamav-faq Github repository.
6 years ago
Micah Snyder
52cddcbcfd
Updating and cleaning up copyright notices.
6 years ago
Micah Snyder (micasnyd)
9eeaf14a72
Corrections to CentOS and Debian install guides.
6 years ago
Micah Snyder (micasnyd)
2b5c743d1e
bb12232: Message should have been printed at the debug level instead of error level.
6 years ago
Micah Snyder
6bdace8f6f
Moving CONFDIR and DATADIR definitions out of the Win32 clamav-config.h, to eliminate conflict with directory-finding feature.
6 years ago
Micah Snyder
8149ccedcf
bb12234: Fix for oversight in libjson and libcurl detection code, so that --with-json=<path> will work.
6 years ago
Micah Snyder
29b6da0213
bb12227: Patch to adjust the default CommandReadTimeout to reduce the chance of mail loss when using clamav-milter with the TCP socket. Contribution by Scott Kitterman.
6 years ago
Micah Snyder
748fa6b09e
Adding static clamav-types.h for native Windows builds. Supporting changes to hashtab appear to be needed because cltypes.h no longer automatically brings in claamav-config.h.
6 years ago
Micah Snyder
8d53f30804
Added 0.101.1 version information, flevel enum value. Increased the FLEVEL setting to 110 for 0.102.0 devel. Increased the libclamav revision value to account for the clamav-types.h change.
6 years ago
Micah Snyder
b3e82e5e61
Replacing libclamav/cltypes.h with clamav-types.h.in, which generates a header clamav-types.h that we install alongside clamav.h.
6 years ago
Mickey Sola
9ca0e9f3ef
j475 - fixing invalid read issue caused by uninitialized buffer
6 years ago
Micah Snyder
35f04d064c
Improvements to the fuzz Makefile settings.
6 years ago