8000d078 |
/* |
33872a43 |
* Copyright (C) 2007-2009 Sourcefire, Inc. |
2023340a |
*
* Authors: Tomasz Kojm |
8000d078 |
*
* This program is free software; you can redistribute it and/or modify |
bb34cb31 |
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation. |
8000d078 |
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software |
48b7b4a7 |
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
* MA 02110-1301, USA. |
8000d078 |
*/
#ifndef __MATCHER_BM_H
#define __MATCHER_BM_H
|
b68d11d2 |
#include "matcher.h" |
73218de2 |
#include "filetypes.h" |
bedc58de |
#include "cltypes.h" |
048d7677 |
#include "fmap.h" |
bedc58de |
|
04133ff9 |
#define BM_BOUNDARY_EOL 1
|
bedc58de |
struct cli_bm_patt { |
ab1db3b3 |
unsigned char *pattern, *prefix; |
33872a43 |
char *virname;
uint32_t offdata[4], offset_min, offset_max; |
bedc58de |
struct cli_bm_patt *next; |
9381324a |
uint16_t length, prefix_length; |
ab1db3b3 |
uint16_t cnt; |
f70b93e1 |
unsigned char pattern0; |
6c26e99c |
uint32_t boundary, filesize; |
bedc58de |
}; |
8000d078 |
|
006f5fe6 |
struct cli_bm_off {
uint32_t *offset, *offtab, cnt, pos;
};
|
33872a43 |
int cli_bm_addpatt(struct cli_matcher *root, struct cli_bm_patt *pattern, const char *offset); |
5612732c |
int cli_bm_init(struct cli_matcher *root); |
49cc1e3c |
int cli_bm_initoff(const struct cli_matcher *root, struct cli_bm_off *data, fmap_t *map); |
e6f5ac51 |
void cli_bm_freeoff(struct cli_bm_off *data); |
63979bf2 |
int cli_bm_scanbuff(const unsigned char *buffer, uint32_t length, const char **virname, const struct cli_bm_patt **patt, const struct cli_matcher *root, uint32_t offset, fmap_t *map, struct cli_bm_off *offdata); |
5612732c |
void cli_bm_free(struct cli_matcher *root); |
8000d078 |
#endif |