49 Commits (e4d0ef01841e7ab242bb8a70dbea62cbf020a2ce)

Author	SHA1	Message	Date
Török Edvin	7719760b66	pdf: implement text extraction (bb #2022)	14 years ago
Török Edvin	c16b3abb8c	flag and dump PDF objects with /Launch (bb #3514).	14 years ago
Török Edvin	7606789f91	Better detection for encrypted PDFs (bb #2448) ... If --block-encrypted is specified then we can detect Encrypted.PDF if: - PDF is encrypted with R 2,3,4 or 5 - PDF is not displayable without specifying a password If PDF is encrypted, but is displayable without specifying a password, then it is not detected as Encrypted.PDF.	14 years ago
Török Edvin	acc8bccb89	bb #2307.	15 years ago
Török Edvin	4116c65d1b	Add bytecode API to determine whether running under JIT.	15 years ago
Török Edvin	f73212dc62	Fix bytecode virusname reporting (bb #2255). ... Also adds possibility to stop a hook from executing, and set a virus as heuristic (by using BC.Heuristic* name)	15 years ago
Török Edvin	4abbeb3a6c	Sync headers with bytecode compiler.	15 years ago
Török Edvin	1dae00ebf4	bytecode: add icon match API.	15 years ago
Török Edvin	dc200c6b19	Add bytecode API for pdf.	15 years ago
Török Edvin	9f1715ccea	Add new bytecode APIs to access the environment. ... check_platform(...) is an API that can be used to: - blacklist JIT/bytecode on just a very specific platform (not recommended) - mask (with 0xf/0xff) some fields, and keep just the flags that uniquely identify the system where a bug occurs (for example linux + ppc32). - it returns a bool so you can do further checks if needed. The bytecode also has access to all the information collected from the environment, so it can make more detailed decisions (based on CPU, presence of SELinux/PaX, etc.). You can't introduce new detections via bytecode, but you can write new conditions using existing ones. The previously added builtin bytecode moved all the JIT disable logic to bytecode for easy updating.	15 years ago
Török Edvin	d5ffa2acff	Introduce BC_STARTUP bytecode (bb #2101, #2078). ... This bytecode will be run in interpreter mode on startup: it can disable the JIT, or disable all further bytecodes. There will be a builtin copy of it that is loaded if no BC_STARTUP bytecodes were loaded (like filetypes_int.h and daily.ftm). Only one BC_STARTUP bytecode is accepted, so as soon as bytecode.cvd will contain one, it won't be overridable! This bytecode will replace all the JIT checks (CPU, selinux, pax) etc., and allows to disable the JIT on just specific OS/arch/compiler/etc. combinations. There are too many combinations to have a dconf flag for each. Also fix the bytecode dconf so that the individual JIT_* flags actually work (previously we could disable the entire JIT, or none at all). Also introduce preliminary support for bytecode test mode (we already have auto, jit and interpreter mode, introducing another mode here is easiest). The test mode doesn't actually compare the outputs yet, but it does fail if the JIT is disabled / falls back to interpreter.	15 years ago
Török Edvin	da91503d8e	Properly round ilog/iexp/...	15 years ago
Török Edvin	7ebca3d717	Fix interpreter on new bytecode API tests.	15 years ago
Török Edvin	7a7365efe9	0.96.1 new APIs (cli_map etc.)	15 years ago
Török Edvin	8f5cead087	Fix bytecode_api.h ... It helps if I actually run make before committing.	15 years ago
Török Edvin	4ed8c2349b	Restore the fix in clamav-0.96-19-ge4a0f2c. ... It got lost when running sync_clamav in the bytecode compiler. Fixed the script now.	15 years ago
Török Edvin	1c4683acd1	add match_offsets support.	15 years ago
Török Edvin	3735fda134	min/max functionality level support.	15 years ago
Török Edvin	e4a0f2c94f	fix compiler warnings (bb #1872, bb #1934, bb #1935)	15 years ago
Török Edvin	b00a7cc8f8	jsnorm api.	15 years ago
Török Edvin	02068643c1	Print location of runtime error.	15 years ago
Török Edvin	7b33a3661d	More API fixes.	15 years ago
Török Edvin	6ad39a4099	zlib/buffer apis.	15 years ago
Török Edvin	75e18b29c2	minimalistic zlib api.	15 years ago
Török Edvin	f6471bc9d6	More APIs.	15 years ago
Török Edvin	d9fbce26fc	More API additions for PDF.	15 years ago
Török Edvin	b56bea54d3	New API for buffer fill.	15 years ago
Török Edvin	236fb13647	New pointer handling rules.	15 years ago
Török Edvin	847d7fc1b8	2009->2010	16 years ago
Török Edvin	4395bb9acf	bytecode ptrdiff32 opcode.	16 years ago
Török Edvin	2d45ef0616	Support for malloc in bytecode. Fix crash with mismatched api/flevel versions.	16 years ago
Török Edvin	565e677f95	file_find, file_byteat bytecode APIs.	16 years ago
Török Edvin	f4e3421592	Support PE hook bytecodes triggered by logical signature.	16 years ago
Török Edvin	0fa95ef231	filesize, and pe_rawaddr API.	16 years ago
Török Edvin	688799d126	yc_bytecode is able to unpack a file now!	16 years ago
Török Edvin	65c740d7d8	Add support for tracing (if bytecode compiled with support). ... TODO: global id 0 is now a null pointer, need to adjust rest of conversion code accordingly.	16 years ago
Török Edvin	75acf165c7	Sync headers with clamav bytecode compiler.	16 years ago
Török Edvin	b8656613c0	Doxygenize API headers.	16 years ago
Török Edvin	250d92c533	Sync with compiler.	16 years ago
Török Edvin	ec41017bba	WiP	16 years ago
Török Edvin	ab63657088	Add generic and PE hooks.	16 years ago
Török Edvin	88815fd801	Sync with compiler.	16 years ago
Török Edvin	d38d6dadef	Logical signature hook for bytecode.	16 years ago
Török Edvin	dcee45cce2	Update to latest bytecode format.	16 years ago
Török Edvin	7189addbde	WiP on debug APi.	16 years ago
Török Edvin	4789b8a5a6	Add draft file API, doesn't work yet.	16 years ago
Török Edvin	d0af4afea4	ctx param to APIs	16 years ago
Török Edvin	1a486dca3b	Add hidden ctx param to APIcalls.	16 years ago
Török Edvin	cf0cd429e9	Implement API calls from bytecode.	16 years ago