Commit Graph

223 Commits (c9a070c9d3898a86f4f0d11668b0fc0b7b6bd857)

Author SHA1 Message Date
Jonas Zaddach 1c6bead7ba Tolerate different LZMA parameters in UPX compression 8 years ago
Mickey Sola 5ce31ac0a0 bb11904 - ensuring md5 hashset string is initialized before use 8 years ago
Micah Snyder 4cd97da451 eliminating warnings, mostly with regards to signed vs unsigned comparisons, some of which could have been functional bugs if negative values were used (for offsets, etc). cleaned up a couple of macros and cleaned up some ifdefs. 8 years ago
Micah Snyder 1f9f20967c error detection for cli_rawaddr is to check the err variable, not check offset >= 0. Made fix in two locations. Also made a few minor fixes to remove warnings. 8 years ago
Micah Snyder 7d4ca21b92 minor change to remove warning and testin git pre-commit hook. 8 years ago
Mickey Sola 4642fd0442 pe - correcting memory loss caused by double string allocation 8 years ago
Steven Morgan cbf5017a7d bb11805 fix multiple results. Refactor false positive and heuristic precedence logic. 8 years ago
Steven Morgan 6e50356cb2 fix imphash 'thunk' processing due to unit test check1_clamscan fail. 8 years ago
Steven Morgan 22cb38ed24 pull request #53(2/4): Spelling fix by klemens(ka7). 9 years ago
Kevin Lin 8d37842072 win32: fixes for sigtool imphash linking 9 years ago
Kevin Lin 67f8441d5e implement cli_strndup and cli_mpool_strndup 9 years ago
Kevin Lin 634c859458 imphash: code review and clean up 9 years ago
Kevin Lin aedd942cec imphash: yara copyright for pe_ordinal function 9 years ago
Kevin Lin 211edda0a3 imphash: refactor code for scanning and sigtool usage 9 years ago
Kevin Lin 832d44e748 sig: convert .ith to .imp; add .imp to sigtool 9 years ago
Kevin Lin 3cc632adc8 sigtool: properly generates and reports pe section hashes (mdb) 9 years ago
Kevin Lin 81610c3ec2 imphash: dll and func name validation 9 years ago
Kevin Lin 3262814227 imptbl: macroize similar code; add size based on hashed data 9 years ago
Kevin Lin 48641f8b20 imptbl: general code clean-up and fixes 9 years ago
Kevin Lin 4adb74a45a dconf: support added for imptbl and imphash 9 years ago
Kevin Lin 66c20d21c3 imphash: signature file support 9 years ago
Kevin Lin 4bf268ce11 imptbl: add data collection for preclass 9 years ago
Kevin Lin 8955ca5b6a imphash: add parsing of import table and calculate imphash 9 years ago
Kevin Lin 87fc762ee0 bb#11397 - fix debug VI hex truncation 9 years ago
Kevin Lin 059ca61484 compiler warning suppression 9 years ago
Mickey Sola 46a35abe56 mass update of copyright headers 10 years ago
Steven Morgan 14d24ec291 bb11371 - fix integer underflow. 10 years ago
Steven Morgan fcff42e9ac Eliminate json_api funtion calls and debug messages for pe files when preclass scannning is not in effect. 10 years ago
Kevin Lin be8b084e64 bb#11284 - fixed integer underflow in detecting W32.Polipos.A method 10 years ago
Steven Morgan 8aeedf3c42 bb11274 - adds out of bounds check for petite packed files. Patch from Sebastian Andrzej Siewior. 10 years ago
Shawn Webb 771c230998 Actually flag the heuristic if the y0da bounds check failed 11 years ago
Shawn Webb 3d6d7a7df9 bb#11210: Apply a basic fix for y0da 11 years ago
Shawn Webb 182c2d6903 Adjust the logic surrounding adjusting the PE section sizes 11 years ago
Shawn Webb 017f34901b More whitespace changes 11 years ago
Shawn Webb f98a68afe8 Retab cli_scanpe() 11 years ago
Shawn Webb fc3794a54d Merge fix from security/bb11155 branch 11 years ago
Shawn Webb cd94be7a52 Silence a bunch of compiler warnings in libclamav 11 years ago
Kevin Lin 20b45621cb added pre-class timeouts for ms-docs and pe files 11 years ago
Shawn Webb 60d8d2c352 Move all the crypto API to clamav.h 11 years ago
Steven Morgan 6c048b8a30 Use json_object_object_get_ex() rather than json_object_object_get(), which is deprecated in json-c 0.10 11 years ago
Shawn Webb 636b717835 Add more file and section flags to the json properties file for PE files 11 years ago
Shawn Webb 172c4dd280 Add JSON properties to PE parsing 11 years ago
Shawn Webb da6e06dd68 Provide further abstractions to the OpenSSL integration work 11 years ago
Shawn Webb f077c6174f Fix some race conditions. Fix some memory leaks. 11 years ago
Shawn Webb a1cbd793f3 Fix all memory leaks introduce by OpenSSL backport. 11 years ago
Shawn Webb 7fb5036fb2 Make Valgrind happy. Rely less on EVP_MD_CTX_create. 11 years ago
Shawn Webb b2e7c931d0 Use OpenSSL for hashing. 11 years ago
Shawn Webb e8a1a9056c Add ability to disable stats 11 years ago
Shawn Webb 7db9ec7452 Phase 2 of gathering PE section hash data 11 years ago
Shawn Webb 43adde3e77 Fix a couple bugs 11 years ago