libclamav/dconf.c
bc93eda0
 /*
  *  Copyright (C) 2007 Tomasz Kojm <tkojm@clamav.net>
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License version 2 as
  *  published by the Free Software Foundation.
  *
  *  This program is distributed in the hope that it will be useful,
  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  *  GNU General Public License for more details.
  *
  *  You should have received a copy of the GNU General Public License
  *  along with this program; if not, write to the Free Software
  *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
  *  MA 02110-1301, USA.
  */
 
 #if HAVE_CONFIG_H
 #include "clamav-config.h"
 #endif
 
 #include <stdio.h>
 #include <string.h>
 #include <stdlib.h>
 #include <ctype.h>
 
 #include "clamav.h"
 #include "cltypes.h"
 #include "dconf.h"
 #include "readdb.h"
 #include "str.h"
 #include "others.h"
 
 struct dconf_module {
     const char	*mname;	    /* module name */
     const char	*sname;	    /* submodule name */
     uint32_t	bflag;	    /* bit flag */
     uint8_t	state;	    /* default state (on/off) */
 };
 
692bda68
 #ifdef CL_EXPERIMENTAL
 #define DCONF_ENABLE_EXPERIMENTAL 1
 #else
 #define DCONF_ENABLE_EXPERIMENTAL 0
 #endif
 
bc93eda0
 static struct dconf_module modules[] = {
 
     { "PE",	    "PARITE",	    PE_CONF_PARITE,	    1 },
     { "PE",	    "KRIZ",	    PE_CONF_KRIZ,	    1 },
     { "PE",	    "MAGISTR",	    PE_CONF_MAGISTR,	    1 },
     { "PE",	    "POLIPOS",	    PE_CONF_POLIPOS,	    1 },
     { "PE",	    "MD5SECT",	    PE_CONF_MD5SECT,	    1 },
     { "PE",	    "UPX",	    PE_CONF_UPX,	    1 },
     { "PE",	    "FSG",	    PE_CONF_FSG,	    1 },
19d9d4da
 
c98bc23f
     { "PE",	    "SUE",	    PE_CONF_SUE,	    1 },
19d9d4da
 
bc93eda0
     { "PE",	    "PETITE",	    PE_CONF_PETITE,	    1 },
     { "PE",	    "PESPIN",	    PE_CONF_PESPIN,	    1 },
     { "PE",	    "YC",	    PE_CONF_YC,		    1 },
     { "PE",	    "WWPACK",	    PE_CONF_WWPACK,	    1 },
19d9d4da
 
c98bc23f
     { "PE",	    "NSPACK",	    PE_CONF_NSPACK,	    1 },
     { "PE",	    "MEW",	    PE_CONF_MEW,	    1 },
     { "PE",	    "UPACK",	    PE_CONF_UPACK,	    1 },
     { "PE",	    "ASPACK",	    PE_CONF_ASPACK,	    1 },
bc93eda0
 
     { "ELF",	    NULL,	    0x1,		    1 },
 
     { "ARCHIVE",    "RAR",	    ARCH_CONF_RAR,	    1 },
     { "ARCHIVE",    "ZIP",	    ARCH_CONF_ZIP,	    1 },
     { "ARCHIVE",    "GZIP",	    ARCH_CONF_GZ,	    1 },
     { "ARCHIVE",    "BZIP",	    ARCH_CONF_BZ,	    1 },
     { "ARCHIVE",    "SZDD",	    ARCH_CONF_SZDD,	    1 },
     { "ARCHIVE",    "CAB",	    ARCH_CONF_CAB,	    1 },
     { "ARCHIVE",    "CHM",	    ARCH_CONF_CHM,	    1 },
     { "ARCHIVE",    "OLE2",	    ARCH_CONF_OLE2,	    1 },
     { "ARCHIVE",    "TAR",	    ARCH_CONF_TAR,	    1 },
     { "ARCHIVE",    "BINHEX",	    ARCH_CONF_BINHEX,	    1 },
     { "ARCHIVE",    "SIS",	    ARCH_CONF_SIS,	    1 },
8fb8d069
     { "ARCHIVE",    "NSIS",	    ARCH_CONF_NSIS,	    1 },
bc93eda0
 
     { "DOCUMENT",   "HTML",	    DOC_CONF_HTML,	    1 },
     { "DOCUMENT",   "RTF",	    DOC_CONF_RTF,	    1 },
     { "DOCUMENT",   "PDF",	    DOC_CONF_PDF,	    1 },
 
     { "MAIL",	    "MBOX",	    MAIL_CONF_MBOX,	    1 },
     { "MAIL",	    "TNEF",	    MAIL_CONF_TNEF,	    1 },
     { "MAIL",	    "PST",	    MAIL_CONF_PST,	    1 },
 
     { "OTHER",	    "UUENCODED",    OTHER_CONF_UUENC,	    1 },
     { "OTHER",	    "SCRENC",	    OTHER_CONF_SCRENC,	    1 },
     { "OTHER",	    "RIFF",	    OTHER_CONF_RIFF,	    1 },
     { "OTHER",	    "JPEG",	    OTHER_CONF_JPEG,	    1 },
     { "OTHER",	    "CRYPTFF",	    OTHER_CONF_CRYPTFF,	    1 },
 
692bda68
     { "PHISHING",   "ENGINE",       PHISHING_CONF_ENGINE,   1 },
     { "PHISHING",   "ENTCONV",      PHISHING_CONF_ENTCONV,  DCONF_ENABLE_EXPERIMENTAL }, /* exp */
 
bc93eda0
     { NULL,	    NULL,	    0,			    0 }
 };
 
 struct cli_dconf *cli_dconf_init(void)
 {
 	unsigned int i;
 	struct cli_dconf *dconf;
 
 
     dconf = (struct cli_dconf *) cli_calloc(sizeof(struct cli_dconf), 1);
     if(!dconf)
 	return NULL;
 
     for(i = 0; modules[i].mname; i++) {
 	if(!strcmp(modules[i].mname, "PE")) {
 	    if(modules[i].state)
 		dconf->pe |= modules[i].bflag;
 
 	} else if(!strcmp(modules[i].mname, "ELF")) {
 	    if(modules[i].state)
 		dconf->elf |= modules[i].bflag;
 
 	} else if(!strcmp(modules[i].mname, "ARCHIVE")) {
 	    if(modules[i].state)
 		dconf->archive |= modules[i].bflag;
 
 	} else if(!strcmp(modules[i].mname, "DOCUMENT")) {
 	    if(modules[i].state)
 		dconf->doc |= modules[i].bflag;
 
 	} else if(!strcmp(modules[i].mname, "MAIL")) {
 	    if(modules[i].state)
 		dconf->mail |= modules[i].bflag;
 
 	} else if(!strcmp(modules[i].mname, "OTHER")) {
 	    if(modules[i].state)
 		dconf->other |= modules[i].bflag;
692bda68
 	} else if(!strcmp(modules[i].mname, "PHISHING")) {
 	    if(modules[i].state)
 		dconf->phishing |= modules[i].bflag;
bc93eda0
 	}
     }
 
     return dconf;
 }
 
 void cli_dconf_print(struct cli_dconf *dconf)
 {
692bda68
 	uint8_t pe = 0, elf = 0, arch = 0, doc = 0, mail = 0, other = 0, phishing=0;
bc93eda0
 	unsigned int i;
 
 
     cli_dbgmsg("Dynamic engine configuration settings:\n");
     cli_dbgmsg("--------------------------------------\n");
 
     for(i = 0; modules[i].mname; i++) {
 	if(!strcmp(modules[i].mname, "PE")) {
 	    if(!pe) {
 		cli_dbgmsg("Module PE: %s\n", dconf->pe ? "On" : "Off");
 		pe = 1;
 	    }
 	    if(dconf->pe)
 		cli_dbgmsg("   * Submodule %10s:\t%s\n", modules[i].sname, (dconf->pe & modules[i].bflag) ? "On" : "** Off **");
 	    else
 		continue;
 
 	} else if(!strcmp(modules[i].mname, "ELF")) {
 	    if(!elf) {
 		cli_dbgmsg("Module ELF: %s\n", dconf->elf ? "On" : "Off");
 		elf = 1;
 	    }
 
 	} else if(!strcmp(modules[i].mname, "ARCHIVE")) {
 	    if(!arch) {
 		cli_dbgmsg("Module ARCHIVE: %s\n", dconf->archive ? "On" : "Off");
 		arch = 1;
 	    }
 	    if(dconf->archive)
 		cli_dbgmsg("   * Submodule %10s:\t%s\n", modules[i].sname, (dconf->archive & modules[i].bflag) ? "On" : "** Off **");
 	    else
 		continue;
 
 	} else if(!strcmp(modules[i].mname, "DOCUMENT")) {
 	    if(!doc) {
 		cli_dbgmsg("Module DOCUMENT: %s\n", dconf->doc ? "On" : "Off");
 		doc = 1;
 	    }
 	    if(dconf->doc)
 		cli_dbgmsg("   * Submodule %10s:\t%s\n", modules[i].sname, (dconf->doc & modules[i].bflag) ? "On" : "** Off **");
 	    else
 		continue;
 
 	} else if(!strcmp(modules[i].mname, "MAIL")) {
 	    if(!mail) {
 		cli_dbgmsg("Module MAIL: %s\n", dconf->mail ? "On" : "Off");
 		mail = 1;
 	    }
 	    if(dconf->mail)
 		cli_dbgmsg("   * Submodule %10s:\t%s\n", modules[i].sname, (dconf->mail & modules[i].bflag) ? "On" : "** Off **");
 	    else
 		continue;
 
 	} else if(!strcmp(modules[i].mname, "OTHER")) {
 	    if(!other) {
 		cli_dbgmsg("Module OTHER: %s\n", dconf->other ? "On" : "Off");
 		other = 1;
 	    }
 	    if(dconf->other)
 		cli_dbgmsg("   * Submodule %10s:\t%s\n", modules[i].sname, (dconf->other & modules[i].bflag) ? "On" : "** Off **");
 	    else
 		continue;
692bda68
 	} else if(!strcmp(modules[i].mname, "PHISHING")) {
 	    if(!phishing) {
 		cli_dbgmsg("Module PHISHING %s\n", dconf->phishing ? "On" : "Off");
 		phishing = 1;
 	    }
 	    if(dconf->phishing)
 		cli_dbgmsg("   * Submodule %10s:\t%s\n", modules[i].sname, (dconf->phishing & modules[i].bflag) ? "On" : "** Off **");
 	    else
 		continue;
bc93eda0
 	}
     }
 }
 
 static int chkflevel(const char *entry, int field)
 {
 	char *pt;
 
 
     if((pt = cli_strtok(entry, field, ":"))) { /* min version */
 	if(!isdigit(*pt)) {
 	    free(pt);
 	    return 0;
 	}
 
 	if((unsigned int) atoi(pt) > cl_retflevel()) {
 	    free(pt);
 	    return 0;
 	}
 
 	free(pt);
 
 	if((pt = cli_strtok(entry, field + 1, ":"))) { /* max version */
 	    if(!isdigit(*pt)) {
 		free(pt);
 		return 0;
 	    }
 
 	    if((unsigned int) atoi(pt) < cl_retflevel()) {
 		free(pt);
 		return 0;
 	    }
 
 	    free(pt);
 	}
     }
 
     return 1;
 }
 
 int cli_dconf_load(FILE *fd, struct cl_engine **engine, unsigned int options)
 {
 	char buffer[FILEBUFF];
 	unsigned int line = 0;
 	int ret = 0;
 	struct cli_dconf *dconf;
 	uint32_t val;
 
 
     if((ret = cli_initengine(engine, options))) {
 	cl_free(*engine);
 	return ret;
     }
 
     dconf = (struct cli_dconf *) (*engine)->dconf;
 
     while(fgets(buffer, FILEBUFF, fd)) {
 	line++;
 	cli_chomp(buffer);
 
 	if(!strncmp(buffer, "PE:", 3) && chkflevel(buffer, 2)) {
 	    if(sscanf(buffer + 3, "0x%x", &val) == 1) {
 		dconf->pe = val;
 	    } else {
 		ret = CL_EMALFDB;
 		break;
 	    }
 	}
 
 	if(!strncmp(buffer, "ELF:", 4) && chkflevel(buffer, 2)) {
 	    if(sscanf(buffer + 4, "0x%x", &val) == 1) {
 		dconf->elf = val;
 	    } else {
 		ret = CL_EMALFDB;
 		break;
 	    }
 	}
 
 	if(!strncmp(buffer, "ARCHIVE:", 8) && chkflevel(buffer, 2)) {
 	    if(sscanf(buffer + 8, "0x%x", &val) == 1) {
 		dconf->archive = val;
 	    } else {
 		ret = CL_EMALFDB;
 		break;
 	    }
 	}
 
 	if(!strncmp(buffer, "DOCUMENT:", 9) && chkflevel(buffer, 2)) {
 	    if(sscanf(buffer + 9, "0x%x", &val) == 1) {
 		dconf->doc = val;
 	    } else {
 		ret = CL_EMALFDB;
 		break;
 	    }
 	}
 
 	if(!strncmp(buffer, "MAIL:", 5) && chkflevel(buffer, 2)) {
 	    if(sscanf(buffer + 5, "0x%x", &val) == 1) {
 		dconf->mail = val;
 	    } else {
 		ret = CL_EMALFDB;
 		break;
 	    }
 	}
 
 	if(!strncmp(buffer, "OTHER:", 6) && chkflevel(buffer, 2)) {
 	    if(sscanf(buffer + 6, "0x%x", &val) == 1) {
 		dconf->other = val;
 	    } else {
 		ret = CL_EMALFDB;
 		break;
 	    }
 	}
692bda68
 
 	if(!strncmp(buffer, "PHISHING:", 9) && chkflevel(buffer, 2)) {
 	    if(sscanf(buffer + 9, "0x%x", &val) == 1) {
 		dconf->phishing = val;
 	    } else {
 		ret = CL_EMALFDB;
 		break;
 	    }
 	}
bc93eda0
     }
 
     if(ret) {
 	cli_errmsg("Problem parsing configuration file at line %u\n", line);
 	cl_free(*engine);
 	return ret;
     }
 
     return CL_SUCCESS;
 }