175 Commits (9d8868627833a6669b8700a52cb2c7ccca68f961)

Author	SHA1	Message	Date
Tomasz Kojm	8dd6c63cce	avoid marking internal ftypes UNOFFICIAL	15 years ago
Tomasz Kojm	2979de20da	fix some compiler warnings	15 years ago
Tomasz Kojm	486fd3daf5	clean up some checks	15 years ago
Török Edvin	5b74e89a35	enable prefiltering, and add to dconf. ... Also downgrade some warnings to debug messages.	15 years ago
Török Edvin	6eeadbfeda	dconf for bytecode.	15 years ago
Török Edvin	039af772c8	Don't fail if bytecode was skipped due to functionality level.	15 years ago
Török Edvin	cc4b3fca6c	fix memory leak in prefiltering code.	15 years ago
Tomasz Kojm	d46cdd59ea	libclamav: add cl_countsigs() (bb#1473)	16 years ago
Török Edvin	ab89360583	Support for macros in logical subsignatures (bb #164). ... In the LDB there is (one or more) special subsignature ${min-max}MACROID$, which means: must match any signature from group MACROID (for current filetype), and the match must occur at a distance of min-max from the start(!) of the previous logical subsignature match. It also has the sideeffect of making the previous subsignature considered a match only if both that and the macro matches. The offset of first match for the previous logical subsig will be the offset where the {min-max} distance is satisfied. The macro logical subsignature will have a count of 0 (if it didn't match together with the previous subsig), or a count of 1 if it did. The matches can occur anywhere (even in different ac scan buffers), since I don't call cli_ac_scanbuff I just use the offset of first match (which we have for the bytecode anyway). There can be at most 32 macro groups, signatures are added to a macro group by using $MACROID$ as offset. For example pdb entries could be converted to PDB:3:$0:<hexsig of domainname> if we assign macro id 0 to PDB (and we can assign 31 more macro ids to whatever). Example: test.ldb: TestMacro;Target:0;0&1;616161;${3-4}12$ test.ndb: D:0:$12:6262 D:0:$12:6363 D:0:$11:6262 test.dat: aaaaxccdd test-nomatch.dat: aaaaxxxccdd	16 years ago
Tomasz Kojm	e293229df0	don't count lsig associated with bc	16 years ago
Török Edvin	57f14280a7	Fix use-after-free on bytecode load/execution. ... lsig->bc was referring to the bytecode directly (via a pointer), but the bytecode struct changes place in memory (it is realloced on each .cbc load). So use an index instead of the direct pointer.	16 years ago
Tomasz Kojm	bb1e844cc2	fix some warnings	16 years ago
Tomasz Kojm	de351ee1bc	libclamav: handle digitally signed .info files	16 years ago
Török Edvin	a35cfe5137	print bytecode metadata.	16 years ago
Török Edvin	be43f951c6	BytecodeSecurity setting.	16 years ago
Tomasz Kojm	ace26bfe08	libclamav: check .info files while loading CVD/CLD	16 years ago
Tomasz Kojm	0c234f5ffd	CL_DB_CVDNOTMP is now the only way to load .cvd/.cld files; prepare ... for .info signing	16 years ago
Török Edvin	f4e3421592	Support PE hook bytecodes triggered by logical signature.	16 years ago
Török Edvin	261e29da34	Fix bus error on Sparc. ... Now that we have a struct with a 64-bit int member, we need to align everything to 64-bits on sparc! The FRAG itself was aligned, however the ->fake member was at 4-bytes distance (so half the time unaligned). Fix this by adding a dummy 64-bit member in the union to force alignment to at least 64-bit. Also fix some compiler warnings from make distcheck.	16 years ago
Tomasz Kojm	570b1d0050	libclamav: cdb: drop FileType; cover ARJ, CAB, TAR, CPIO and 7Z	16 years ago
aCaB	6223810ba0	tie cache to engine	16 years ago
Tomasz Kojm	545247afb0	libclamav/readdb.c: fix compatibility issue with .zmd sigs (bb#1793)	16 years ago
Tomasz Kojm	12c6a97e9b	fix some compiler warnings	16 years ago
Török Edvin	1d406931e2	Fix array size for parsing .ldb tokens. ... Looks like a wrong merge of the bytecode branch, str_tokenize was updated to use LDB_TOKENS+1, but not the variable's declaration!	16 years ago
Tomasz Kojm	4168b01087	libclamav: allow lsigs be anchored to specific containers (bb#1293), eg. Container:CL_TYPE_ZIP	16 years ago
Tomasz Kojm	8d2654bb3f	libclamav/readdb.c: when some lsig's attribute is unknown ignore the entire signature and not the attribute itself	16 years ago
Tomasz Kojm	15f413d157	libclamav: handle zmd/rmd with cdb (bb#1579)	16 years ago
Tomasz Kojm	20e4199352	fix tokens	16 years ago
Tomasz Kojm	55094a9c76	libclamav: base code for unified container metadata matcher (bb#1579)	16 years ago
Török Edvin	e1120abceb	Fix logic.	16 years ago
aCaB	7134c8e007	force VI anchored sigs into AC	16 years ago
Tomasz Kojm	01b695fd42	fix error message	16 years ago
Tomasz Kojm	17cfd76f5b	libclamav: add support for FileSize, EntryPoint and NumberOfSections in lsig's tdb	16 years ago
Tomasz Kojm	0f7ba61742	libclamav: integrate ldb sigs with icon matcher	16 years ago
aCaB	419e2be44d	icon scan interface rework	16 years ago
aCaB	cca2995351	icon matching functions	16 years ago
aCaB	1a1ee68a2a	bw matching	16 years ago
Tomasz Kojm	a96eead450	sigtool: add --test-sigs (basic functionality) (bb#1246)	16 years ago
aCaB	fd183cf921	allow spreading up to 103% due to rounding	16 years ago
aCaB	4e968cd31d	add ccount	16 years ago
aCaB	d1a0a37b35	properly free the engine	16 years ago
aCaB	c318ce5bfa	unload idb, fix virus-path leak	16 years ago
aCaB	182e40db24	idb load fixes	16 years ago
aCaB	73d8cdedea	load idb	16 years ago
aCaB	a8d621cf80	test icon scan	16 years ago
Török Edvin	74b0023374	Fix after merge: update to fmap API.	16 years ago
Tomasz Kojm	914508b172	libclamav/readdb.c: make sure static sigs with floating chars go into AC	16 years ago
Tomasz Kojm	424d41d344	libclamav: replace qsort implementation and optimize its common usage (bb#1721)	16 years ago
Tomasz Kojm	208ceae5c7	clamd, clamscan: add support for OfficialDatabaseOnly/--official-db-only (bb#1743)	16 years ago
Tomasz Kojm	284e1ee4ba	libclamav, freshclam: fix handling of dbs when both daily.cvd and daily.cld ... are present in the db directory and ScriptedUpdates are turned off (bb#1739)	16 years ago